386714 used deferred auth for form login and error pages

This commit is contained in:
Greg Wilkins 2012-08-08 10:36:42 +10:00
parent b4ec1f36ed
commit b2fd3aad26
1 changed files with 2 additions and 2 deletions

View File

@ -188,8 +188,8 @@ public class FormAuthenticator extends LoginAuthenticator
if (!mandatory)
return _deferred;
if (isLoginOrErrorPage(URIUtil.addPaths(request.getServletPath(),request.getPathInfo())))
return Authentication.NOT_CHECKED;
if (isLoginOrErrorPage(URIUtil.addPaths(request.getServletPath(),request.getPathInfo())) &&!DeferredAuthentication.isDeferred(response))
return _deferred;
HttpSession session = request.getSession(true);