-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Paul,

On 4/11/2010 7:11 PM, Paul Carroll wrote:
> I am using Tomcat 6.0 on Windows Server 2003.  It seems that when my
> session expires I am redirected to the login page which I would
> expect.  However, my filter is not called when I am redirected to the
> login page.  When I used Jetty as my web server, the call was
> intercepted by the filter before the user was presented the login
> page.  Does anyone know why this is the case?  The following is the
> sections of my web.xml that contains the filter info.

Valves are called before filters, and Tomcat's authentication and
authorization are implemented as Valves. I don't believe you can have
your filter run before the auth Valve.

If you need your filter to run first, you can use a filter-based
implementation of authentication/authorization such as securityfilter
(http://securityfilter.sourceforge.net).

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkvDQb0ACgkQ9CaO5/Lv0PBilQCfad+n775Jion08oe0qpKfPxew
vWIAn0CtKOSgmMpW0V3JbrF/MncD3Fqj
=bPkC
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to