-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Paul,
On 4/11/2010 7:11 PM, Paul Carroll wrote: > I am using Tomcat 6.0 on Windows Server 2003. It seems that when my > session expires I am redirected to the login page which I would > expect. However, my filter is not called when I am redirected to the > login page. When I used Jetty as my web server, the call was > intercepted by the filter before the user was presented the login > page. Does anyone know why this is the case? The following is the > sections of my web.xml that contains the filter info. Valves are called before filters, and Tomcat's authentication and authorization are implemented as Valves. I don't believe you can have your filter run before the auth Valve. If you need your filter to run first, you can use a filter-based implementation of authentication/authorization such as securityfilter (http://securityfilter.sourceforge.net). - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkvDQb0ACgkQ9CaO5/Lv0PBilQCfad+n775Jion08oe0qpKfPxew vWIAn0CtKOSgmMpW0V3JbrF/MncD3Fqj =bPkC -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org