Home/ Questions/Q 384791
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-12T15:24:53+00:00

I have a java web application running on WebSphere 7. The application uses form

  • 0

I have a java web application running on WebSphere 7. The application uses form authentication method and part of the application accesses some protected resources using ajax requests. However, when the user’s session expires, I am getting the login page in place of the content that is supposed to be refreshed by the ajax request.

Is there a good way to handle this problem? WebSphere returns a response status 200 with the login page so I cannot rely on that.

Maybe there is a way to tell the server that basic authentication should be used in certain circumstances but I don’t know how.

I also thought of checking first if the session is new by making a request to unprotected resources first then return a certain status but it looks like a code smell solution…

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    This is how I handled it in a similar situation. In our case, the AJAX response is always JSON. When the login expires, the authentication filter always sends a login form in HTML. So I check the content-type like this,

     if ((this.getHeader('Content-type') || '').include('application/json'))

    If it’s not JSON, I simply redirect to another protected page, which will trigger a full screen login and then that page will direct user back to the AJAX page.

    • 0