Keith Devens .com - Weblog: Pass-through login

Monday, March 1, 2004

Pass-through login

An important design pattern for people making web applications: If you have one login screen that guards other pages, make sure that trying to go to a page when not logged in brings you to the login page, and that after you log in you automatically get sent to the page you originally tried to go to. Always. Query parameters and all.

Permalink | 1 Comment | id 4743

00:39 (utc-5)

Comments

The CMS I'm building at the moment goes a step further: we even serialize the post data (if there is any) in a hidden form field and then re-submit it once the user has logged in successfully, thus defending against lost data when a user's session times out while they are doing something.

∴ Simon Willison | 5-Mar-2004 2:03am est | http://simon.incutio.com/ | #4083

Feel free to post a comment below. Please see my comment policy.

Formatting Rules (No HTML):

**bold**, *italic*, _underlined_, --strikeout--
"text"="url" creates a link, and URLs are auto-highlighted
Blockquote: Like e-mail, begin paragraph with > (greater-than sign)
Lists: begin paragraph with *,-, or + (unordered), or # (ordered)
Code block: ?!code:language=perl|php|sql|javascript|etc.{\n}...{\n}?!/code

RSS feed RSS feed for Keith's Weblog
Atom feed Atom feed for Keith's Weblog
Weblog archive
Recent comments
on 6 posts