-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 14/05/2012 16:58, Christopher Schultz wrote:
> Thomas,
> 
> On 5/14/12 9:44 AM, Thomas Rohde  wrote:
>> A Filter was my first approach. But the filter is invoked after 
>> authentication has taken place. And for authentication a session 
>> is needed. ;-)
> 
> Right: the form authenticator is in a Valve and Valves run before
> Filters.
> 
>> A HttpSessionListener is invoked AFTER a session is created.
> 
> Hrm.
> 
>> It seems that every approach has some ugly pitfalls. :(
> 
> Agreed. Perhaps a different exception type could be used? We are
> using IllegalStateException but there's no particular reason a
> different subclass of RuntimeException couldn't be used in this
> case: something that could then be mapped in web.xml using
> <error-page>.
> 
> Since it would technically be a change to the API to throw
> something other than IllegalStateException, you might get some
> push-back on a solution like this.

A change to a new sub-class of IllegalStateException shouldn't break
anything.

Mark

> 
> Please file a bug in bugzilla and we'll hash it out over there.
> 
> -chris
> 
> ---------------------------------------------------------------------
>
> 
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJPsTIDAAoJEBDAHFovYFnnjYEP/ibbVSvXy1T22zHo/ZPeDuOJ
p/AwNGgyafsv/FExSDFVTWiRJNPRpImaVmVnc9JzRj7DQJC1xjQzp0SsCYh9Gu58
ZGyz6U9psDZYbSW6cfNToVdbgJZWEdBXo5jb0s/kU1GHqfKx1ZzwrcKCHc2OAYZ+
XZvMNb29ouCPF7kVdFYyXZm/WVLrw5ZQ1KL60f65iIvZDaBrBCNgnhh7Fhxq2PU+
NzRwWiGWVAPWxk1VcBxZuJQz+qsRqp22FBkaEM8A7mDBTfbJvK+rszBqPNk/YGGq
MHRg5DysjTEWizfmRySSw9cSHtQfHq2cQxuxVMfgfMVt67BqeW+r7GB5kUNK/Dpt
fKTFw5AkmJDXYSE0tKOgVq1eECiybSP5co/DFrtnNmVQI/AXePrJ+G8lLdC9KYV/
UyjuT8jPl5JUTA6mKUafGCxL1RYDPFZ3KYpeu9mRDW4gMMmVIsp5xUPMZvPRyfBq
l6O3zjYGMNtFaedcOColeJuXQTvYqiizB2fPzzJdh10Mmb8G1PMlB0cHjhO3/j/F
kQ1W4aQxr4gipQWj0zTqrwZYTkndia0v4VqctbiYJmyHTKAeb6z/Ks9z9yya3vF9
TnvgG+Sf0KEP7zB01MI07UDXP/IdKIyeEhhqIJJ/U4ixSHtBui9MkjfMzjE3V6lw
SCucYHY0sZUFwRMg+Mp1
=b/Sy
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to