From 404ee53a9108e0bf8f9aaf6ebe7219ecad139cb4 Mon Sep 17 00:00:00 2001 From: jeb228 Date: Fri, 21 Jan 2011 16:50:16 +0000 Subject: [PATCH] NIHVIVO-1832 JSPs that call must be recorded as restricted pages, just like Servlets that call VitroHttpServlet.checkLoginStatus(). That way we won't attempt to stay on those pages if the user logs out. --- .../mannlib/vitro/webapp/web/jsptags/ConfirmLoginStatus.java | 3 +++ 1 file changed, 3 insertions(+) diff --git a/webapp/src/edu/cornell/mannlib/vitro/webapp/web/jsptags/ConfirmLoginStatus.java b/webapp/src/edu/cornell/mannlib/vitro/webapp/web/jsptags/ConfirmLoginStatus.java index ce63bfbbc..4b548fd39 100644 --- a/webapp/src/edu/cornell/mannlib/vitro/webapp/web/jsptags/ConfirmLoginStatus.java +++ b/webapp/src/edu/cornell/mannlib/vitro/webapp/web/jsptags/ConfirmLoginStatus.java @@ -14,6 +14,7 @@ import org.apache.commons.logging.LogFactory; import edu.cornell.mannlib.vedit.beans.LoginStatusBean; import edu.cornell.mannlib.vitro.webapp.controller.VitroHttpServlet; +import edu.cornell.mannlib.vitro.webapp.controller.authenticate.LogoutRedirector; import edu.cornell.mannlib.vitro.webapp.filters.VitroRequestPrep; /** @@ -69,6 +70,8 @@ public class ConfirmLoginStatus extends BodyTagSupport { @Override public int doEndTag() throws JspException { + LogoutRedirector.recordRestrictedPageUri(getRequest()); + LoginStatusBean loginBean = LoginStatusBean.getBean(getRequest()); boolean isLoggedIn = loginBean.isLoggedInAtLeast(level);