Aw: Re: Security for RequestFactoryServlet and static cache in ServiceLayerCache

2011-06-03 Thread StefanR
Hi Thomas, thanks for the feedback. Indeed the problem was to only intercept #createServiceInstance() but not #invoke(). Now, it works. Thanks, Stefan. -- You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group. To view this discussion on the web vis

Re: Security for RequestFactoryServlet and static cache in ServiceLayerCache

2011-06-03 Thread Thomas Broyer
I think the field is static to allow multiple instances of the same servlet (for the same servlet-mapping, which I believe is allowed by the servlet spec) share the state, which is static anyway (what's cached is only what's derived from classes and interfaces). If your ServiceLayerDecorator in

Security for RequestFactoryServlet and static cache in ServiceLayerCache

2011-06-03 Thread StefanR
To allow some RequestFactory calls to be executed with and some without an authenticated session, I thought of providing two different RequestFactoryServlets at two different urls. The first one is secured by an http filter and the second is not. The unsecured version adds a special ServiceLay