// --------- Request Parameter Auth ---------
private AuthenticationInfo extractRequestParameterAuthentication(
HttpServletRequest request) {
AuthenticationInfo info = null;
// only consider login form parameters if this is a POST request
// to the j_security_check URL
if (REQUEST_METHOD.equals(request.getMethod())
&& request.getRequestURI().endsWith(REQUEST_URL_SUFFIX)) {
String user = request.getParameter(PAR_J_USERNAME);
String pwd = request.getParameter(PAR_J_PASSWORD);
if (user != null && pwd != null) {
info = new AuthenticationInfo(HttpServletRequest.FORM_AUTH,
user, pwd.toCharArray());
info.put(AuthConstants.AUTH_INFO_LOGIN, new Object());
// if this request is providing form credentials, we have to
// make sure, that the request is redirected after successful
// authentication, otherwise the request may be processed
// as a POST request to the j_security_check page (unless