Filters are not invoked on j_security_check

If you need to do something "special" on login - you will need to store some state in the session. (Like session variable called didInitializeSession)

Then the filter can check for the existence of a request.getUserPrincipal() && session.getAttribute("didInitializeSession") to see if you need to do any special setup work.

-Tim

alee amin wrote:
Hi,

I have implemented form based security on web app using JDBCRealm in
server.xml file. It has been implemented. Now i want to use some pre-req
before accessing any page in secure area say (faces/secure/main.xhtml).

My index page redirect to faces/secure/main.xhtml where it ask for login and
then the page is shown. I want to interpret the request after the login and
before main.xhtml. I have read different topics and it is not possible to
implement Filter on j_security_check (not sure for tomcat 5.5+). Is there
any way to implement on it or there is any alternate that i can interpret
the request?

(security constraint on /faces/secure/*)

I have used an alternate
index -> faces/secure/redirect.jsp -> login (by tomcat) and then
faces/secure/redirect.jsp -> faces/secure/main.xhtml (redirecting to this
page from redirect page). I implemented the FILTER on redirect.jsp. It is
invoking but i am not liking the method.


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to