If a unautheticated user tries to fire an action he is not allowed to execute he is forwarded to the login action (configured in settings.xml). To make a good user experience it's nice to redirect the user back to the action he tried to execute after a successful login. This is especially important if the user's session had timed out and he was in the middle of something when he was logged out.

Because Agavi forwards to the login action the URL is still the one pointing to the original action. Agavi also stores the information about the forward into the request object under org.agavi.controller.forwards.login namespace. So if the login action was actually triggered because of a denied access the first thing we want to do is save the current URL for later use. The place to do this is usually LoginInputView (remember, this is all presentational application logic so the action itself shouldn't do it).

if($this->getContext()->getRequest()->hasAttributeNamespace('org.agavi.controller.forwards.login')) {
  // we were redirected to the login form by the controller because the requested action required security
  // so store the input URL in the session for a redirect after login
  $this->getContext()->getUser()->setAttribute('redirect', $this->getContext()->getRequest()->getUrl(), 'org.agavi.SampleApp.login');
}
else {
  // clear the redirect URL just to be sure 
  $this->getContext()->getUser()->removeAttribute('redirect', 'org.agavi.SampleApp.login');
}

Now after a successful login we want to redirect the user back to the action he requested. To do so we need this in the LoginSuccessView:

if($usr->hasAttribute('redirect', 'org.agavi.SampleApp.login')) {
  $this->getResponse()->setRedirect($usr->removeAttribute('redirect', 'org.agavi.SampleApp.login'));
  return;
}
// else redirect to the welcome page or just proceed with the default behaviour of the view

And that's it. Enjoy the user experience!