struts-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Rick Reumann <>
Subject Re: Antwort: RE: howto redirect to login site after session expiration?
Date Mon, 23 May 2005 17:25:27 GMT
Frank Ratzlow wrote the following on 5/23/2005 6:54 AM:
  some of the actions) serve authorized and unauthorized users the same.
> Afaik if a user sends his first request a session will be created for him 
> (default behaviour). Additionally we invalidate a session when a user 
> authorizes and store his credentials etc. in a newly created one.

I'm not exactly sure what you mean above about the default behavior 
creating a Sesion? I use a Filter to test for the Session and it works 

in my doFilter(..) method...

  HttpSession session = request.getSession(false);
  if (session == null) {

Why wouldn't something like the above work?

I also don't test certain paths with this filter so not all paths are 
checked for a valid session (ie if they go right to the login page 
obviously I don't want to test for a Session yet.)


To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message