Alan, that stack trace seems to indicate that the session access is taking
place in the JSP to which the ForwardResolution has forwarded. Neither
ForwardResolution nor its superclass OnwardResolution do anything with the
session.
-Ben
On Wed, Dec 17, 2008 at 9:52 AM, Alan Burlison <[email protected]>wrote:
> I've been getting the following exception when I select the login page
> of my app, followed by 'back' in the browser, then selecting a link that
> results in a forward [trimmed]:
>
> > org.apache.jasper.JasperException: java.lang.IllegalStateException:
> getAttribute: Session already invalidated
> >
> org.apache.jasper.servlet.JspServletWrapper.handleJspException(JspServletWrapper.java:522)
> >
> org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:410)
> >
> org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:342)
> > org.apache.jasper.servlet.JspServlet.service(JspServlet.java:267)
> > javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
> >
> org.netbeans.modules.web.monitor.server.MonitorFilter.doFilter(MonitorFilter.java:390)
> >
> net.sourceforge.stripes.action.ForwardResolution.execute(ForwardResolution.java:110)
>
> The login page is invalidating the current session, then the call to
> request.getAttribute() in ForwardResolution blows up.
>
> Invalidating the session is a common (and even recommended) way of
> logging a session out and helping prevent cookie stealing, but it
> appears to break Stripes, which seems to assume that a session is always
> available. Is this a known issue, and if so what is the recommended
> workaround?
>
> Thanks,
>
> --
> Alan Burlison
> --
>
------------------------------------------------------------------------------
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you. Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
_______________________________________________
Stripes-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/stripes-users
