Yes, there is no standard way of retrieving the original request during the login.
The FORM authenticator does store this info in a regular session (so it can resume the original request once the authentication has succeeded), under a session note (not attribute!) named org.apache.catalina.authenticator.REQUEST, but that's an implementation detail, and other containers may implement this differently.
[Message sent by forum member 'jluehe' (jluehe)]
http://forums.java.net/jive/thread.jspa?messageID=316593