Form-Based Authentication

Hi!

I decided to use Form-Based Authentication in my web app.

1. The problem is that whenever I enter new page an Internet browser holds an old URL. Thus I am always allowed to enter protected resource for the first time. I read that I can use <redirect/> tag but then I can forget about using t:saveState and messages. Is there any solution to solve the problem?

2. If JSF isn't a url-centric system then how to solve this.

I have such a scenario:

1. user enters a page.

2. He hasn't got enough time to read the contents so he saves URL

3. Next day he pastes the URL into browser thinking that he enters the page he saw yesterday. As we know the URL won't point out the desired page.

I would be grateful for any explanation.

Regards

Mariusz

[821 byte] By [syllepsaa] at [2007-11-27 4:20:35]