Authentication post processing+goto URL

Question

Hi All,
How can I get goto url for a user that has been authenticated by SAM 7.1 using authentication post processing class?
I have to check user attribute in post processing class and redirect by user to SIM change password page as per requirement.
I want that the same goto url I can pass to change password page so that user can redirected to initial requested page after successful password change.
I tried using request.getParameter(goto) but it gives me some encrypted value which I am not able to use. I searched on google and found that ssoToken.getProperty("FullLoginURL"); works for some guys but unfortunately not for me :( :(
If sombody has similar kind of implemetation please let me know the solution.
I would appreciate any help in this regard.
Edited by: Amit_Bansal on Feb 24, 2009 1:55 PM

Answer 1

I am certain there could be if you have applications that send sensitive data in the URL. We do not. If you have some old application that sends user password in the URL ... I could not think of a case we had that would require the string to be encoded. So we removed it. The other alternative would be to decode the string store it in the session perhaps and the retrieve that out of the session. It seemed like a bit too much work any way you sliced it so we unencoded it. I am sure there is some security expert someplace rolling in his grave. I could not think of an instance in our architecture that would require it and it made troubleshooting issues almost impossible with "normal" tools when it was encoded.