Solved

Session handling in Struts 2.1.6

Posted on 2009-04-13
2
2,239 Views
Last Modified: 2013-11-24
Hello folks,

I have a project with the following setup:

Tomcat 6.x
Struts 2.1.6
DisplayTag 1.2
Spring 2.x (1 or 5, don't remember now)

I want to know to to do session controlling in every action of my app, like if the users weren't logged in, they're redirect to certain page to login (in the case of my project, either the user come to a special crafted url like login/SPECIALHASHTOLOGIN or won't enter at all.

Need more details?

Thx in advance.
0
Comment
Question by:dgomesbr
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
2 Comments
 

Accepted Solution

by:
dgomesbr earned 0 total points
ID: 24129721
I'll need modify the default interceptor stack (or create a custom stack) and add a custom interceptor. This custom interceptor will need to implement SessionAware to access the user session, and must implement your custom logic (which action to redirect to, which URLs do not need protection, etc.).

Here is a good tutorial of a LoginInterceptor that behaves similar to what you are requesting:
 
http://www.vitarara.org/cms/struts_2_cookbook/creating_a_login_interceptor 
0
 

Author Comment

by:dgomesbr
ID: 24130488
Some samples of struts.xml and applicationContext.xml
struts.xml:
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE struts PUBLIC
    "-//Apache Software Foundation//DTD Struts Configuration 2.0//EN"
    "http://struts.apache.org/dtds/struts-2.0.dtd">
<struts>
    <constant name="struts.objectFactory" value="spring" />
    <constant name="struts.devMode" value="true" />
	<constant name="struts.enable.SlashesInActionNames" value="true" />
    
    <package name="renaconPackage" extends="struts-default">
	 	<interceptors>
	 		<interceptor name="login" class="loginInterceptor"/>
			
			<!-- stack seguro -->	  	    
			<interceptor-stack name="defaultLoginStack">
				<interceptor-ref name="params" />
				<interceptor-ref name="login" />
				<interceptor-ref name="prepare" />
				<interceptor-ref name="chain" />
				<interceptor-ref name="modelDriven" />
				<interceptor-ref name="fileUpload" />
				<interceptor-ref name="staticParams" />
				<interceptor-ref name="params" />
				<interceptor-ref name="conversionError" />
				<interceptor-ref name="validation" />
				<interceptor-ref name="workflow" />
			</interceptor-stack>
			 
		</interceptors>  	  	
	  	
	  	<!-- mudando o default stack para nosso stack seguro -->
	  	<default-interceptor-ref name="defaultLoginStack" />
	  	 
	  	 
		<!-- 
			*************************************************************
			** Action handler generico									*
			************************************************************* 
			*	eg: usuario/list										* 
			*			-> UsuarioAction.list();						*
			*			-> /pages/usuario/list.jsp						*
			*************************************************************  
		-->
		<action name="*/*" class="{1}Action" method="{2}">
			<interceptor-ref name="defaultLoginStack" />		
            <result>/pages/{1}/{2}.jsp</result>
        </action>			 
    </package>
 
</struts>
 
 
 
ApplicationContext.xml (only the needed part):
 
	<!-- servicos -->
 	<bean id="usuarioService" class="br.com.autenticis.renacon.ejb.UsuarioBean" />
    
    <!-- actions que necessitam de servicos injetados -->
    <bean id="usuarioAction" scope="prototype" class="br.com.autenticis.renacon.actions.UsuarioAction">
        <constructor-arg ref="usuarioService" />
    </bean>
 
    <bean id="loginInterceptor" scope="prototype" class="br.com.autenticis.renacon.actions.interceptors.LoginInterceptor">
        <constructor-arg ref="usuarioService" />
    </bean>

Open in new window

0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
firstChar challenge 13 132
servlet web applications   metadata-complete="true" or false 3 188
jsp insert to database example 2 59
project copy paste issue 1 62
Introduction This article is the second of three articles that explain why and how the Experts Exchange QA Team does test automation for our web site. This article covers the basic installation and configuration of the test automation tools used by…
Introduction This article is the last of three articles that explain why and how the Experts Exchange QA Team does test automation for our web site. This article covers our test design approach and then goes through a simple test case example, how …
The viewer will learn how to implement Singleton Design Pattern in Java.
This tutorial covers a practical example of lazy loading technique and early loading technique in a Singleton Design Pattern.

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question