In LoginServlet.java
, we set these cookies, but they could
easily be set with JavaScript in the loginForm.jsp
page.
View LoginServlet.java source
Then in BreadCrumbFilter.java
(which maps to url-pattern "/*"), we check
to see if these cookies exists. If so, we redirect to j_security_check
to auto-login the user.
View BreadCrumbFilter.java source