SLING-2165 Form based login failure should stay on the same login page to show the login error
git-svn-id: https://svn.apache.org/repos/asf/sling/trunk@1201346 13f79535-47bb-0310-9956-ffa450edef68
diff --git a/pom.xml b/pom.xml
index 0c39734..74bb31b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -98,7 +98,7 @@
<dependency>
<groupId>org.apache.sling</groupId>
<artifactId>org.apache.sling.auth.core</artifactId>
- <version>1.0.4</version>
+ <version>1.0.7-SNAPSHOT</version>
<scope>provided</scope>
</dependency>
<dependency>
diff --git a/src/main/java/org/apache/sling/auth/form/impl/FormAuthenticationHandler.java b/src/main/java/org/apache/sling/auth/form/impl/FormAuthenticationHandler.java
index f18616b..4a2fbeb 100644
--- a/src/main/java/org/apache/sling/auth/form/impl/FormAuthenticationHandler.java
+++ b/src/main/java/org/apache/sling/auth/form/impl/FormAuthenticationHandler.java
@@ -353,6 +353,12 @@
return false;
}
+ //check the referer to see if the request is for this handler
+ if (!checkReferer(request, loginForm)) {
+ //not for this handler, so return
+ return false;
+ }
+
final String resource = setLoginResourceAttribute(request,
request.getRequestURI());
