Multi-tab login errors

[Russell Beall]

Actually, now that I look into it, I have very few back-button errors reported in the logs anymore.  A while back I got tired of seeing the login context errors and so I implemented this custom bit of JSP in the login.jsp which tells the user not to bother trying to login when there is no context.  I intended this mostly for the use case where someone bookmarks the IdP page, but I see that it also shows most of the time now when clicking the back button.  I think this is new behavior with the new version of Safari since it used to be that clicking the back button would usually trigger a replay error.

<%
    LoginContext loginContext = HttpServletHelper.getLoginContext(HttpServletHelper.getStorageService(application),
                                                                  application, request);
    Session userSession = HttpServletHelper.getUserSession(request);
%>
---snip---
		<% if (loginContext != null) { %>
// show login page here...
---snip---
		<% } else { %>

			<h2> Login Context Unavailable </h2>
			<p> Please go directly to the site you were trying to log into and start a session
			from there.  You cannot bookmark the login page at shibboleth.usc.edu, you must 
			bookmark only a page at the resource you were trying to access.

		<% }  %>

Russ.

On Aug 4, 2011, at 4:17 PM, Cantor, Scott E. wrote:

> On 8/4/11 7:07 PM, "Russell Beall" <beall at usc.edu> wrote:
>> 
>> I have sporadic occurrences of the errors I mentioned currently in the
>> logs for things like the back button of course, but the low frequency and
>> lack of any complaint about it makes it a non-issue.  I just needed to
>> make sure it wouldn't escalate.
> 
> You have low frequency for back button messages? What drug are you giving
> your users???
> 
> I get hundreds every hour, it's nonstop. I had to create custom log
> filters to stop the noise.
> 
> -- Scott
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net