authenticationFailureUrl Behavior

[eisenb]

Just a quick question since I can't tell exactly how it works from the doc and code:

If I have set up the above-mentioned URL, does that mean that the user gets wisked away when they enter principal and credentials that are incorrect? The behavior I'd prefer is to return them to the login page and let them try again. In that case, would my failure URL be the same as my login form URL?

Thanks hopefully for a quick off-the-top-of-someone's-head answer.

Bill

[eisenb]

Answering my own question -- the failure url can go to the login form. I'm embarrassed to say that the contacts example does just this and it was there all along.

Feeling shame,
Bill