S138: TransAction Token lifetime very short?

2007-09-20 Thread Thomas.Zygadlewicz
Hello, I'm using the Transaction Token in my Struts138 App. But it seems the token has a very short lifetime. I guess about 1-2 Minutes. How can I manually correct it? My inactivity timeout is set to 20 mins - so my token should be set to the same value. Can someone tell me how and where?

Struts138 - Restrict Access to my actions?

2007-09-18 Thread Thomas.Zygadlewicz
Hi, I want to restrict access to my actions - meaning: I dont want users to be able to type them in the adressbar and jump around in my page as they like to. It kinda makes my navigation effords senseless. Ive try to write a servlet-filter which checks for actions beginning with secure - but

AW: Struts138 - Restrict Access to my actions?

2007-09-18 Thread Thomas.Zygadlewicz
Hello Balaji, Thanks for the quick response. The problem is: I dont have a clue what an interceptor is - and how to implement it in my Application. Do you have any examples or guides for this solution? Thanks -Ursprüngliche Nachricht- Von: Balaji J [mailto:[EMAIL PROTECTED]

AW: STRUTS 1.3.8 Validator ist destroying my SessionToken

2007-08-30 Thread Thomas.Zygadlewicz
Yes. Thats right. -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Paul Benedict Gesendet: Mittwoch, 29. August 2007 23:05 An: Struts Users Mailing List Betreff: Re: STRUTS 1.3.8 Validator ist destroying my SessionToken Are you saying the

AW: STRUTS 1.3.8 Validator ist destroying my SessionToken

2007-08-29 Thread Thomas.Zygadlewicz
It is true.. I guess. When the Struts-Validation fails, the following action-class is still executed - leading to the isTokenValid() Method being Used. The strange thing is : the process stops after the first action-class and returns the validator-errors to the screen. I found a way to forward

AW: Struts 1.3.8 Globals.TOKEN_KEY always empty - therefor: isTokenValid() is always false

2007-08-28 Thread Thomas.Zygadlewicz
Thats sadly not quite true... saveToken() is fillig the Globals.TRANSACTION_TOKEN_KEY attribute. You can find the operation in the tokenProcessor.class. And thats why im still stuck with the old problem :( -Ursprüngliche Nachricht- Von: Paul Benedict [mailto:[EMAIL PROTECTED] Im

STRUTS 1.3.8 Validator ist destroying my SessionToken

2007-08-28 Thread Thomas.Zygadlewicz
Hi, Im using the struts-Validator AND the transaction Token. Both work perfectly - BUT if I use them in combination I'm in trouble... If the validator detects wrong data and returns me to the input-form it still starts the actionclass of the submit button - and its executing isTokenValid() .

Transaction Token Problem

2007-08-27 Thread Thomas.Zygadlewicz
Hi, Im having some trouble implementing the Transaction Token into my Application. Ive checked the Data that is being written - and it seems one of the session-keys isnt being written. HttpSession session1 = req.getSession(false); String saved1 = (String)

Struts 1.3.8 Globals.TOKEN_KEY always empty - therefor: isTokenValid() is always false

2007-08-27 Thread Thomas.Zygadlewicz
Hello, I need to fill the Globals.TOKEN_KEY from the session to be able to use saveToken() and isTokenValid() methods. saveToken is only filling the Globals.TRANSACTION_TOKEN_KEY-Variable. can someone help me out? regards, Tom