I would like to use a filter on every servlet and JSP in my webapp to verify that the user is logged in (by checking the user's session for a value), except for "index.jsp" and "error.jsp" (error.jsp is for things like invalid messages, etc).

I would also like to use a filter on certain servlets to perform Form Validation using org.apache.commons.validator.

Is testing the URL the most elegant way to achieve the former (determining when the SecurityFilter should be in effect and when it shouldn't)? And to use the latter (a form validation filter) do I need to register it in the same FilterChain as the the SecurityFilter? Or can there be two separate, disparate filters for a given resource?


Thanks for any insight, it's kind of a confusing topic to me.



Erik


--
To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to