FWIW, I also tried securing my services layer by using a servlet Filter
(same way that I'm using a PersistenceFilter to manage by
EntityManager{Factory}).
I was hoping to query the user's session for a "loggedInUser" object, but
was stymied by the fact that the Filter interface only has a ServletRequest,
not an HttpServletRequest, and thus no access to the user's session. If
anyone knows a solution to this, please share. (Hmm, now I'm wondering if
the ServletRequest can simply be cast to an HttpServletRequest...)
--
You received this message because you are subscribed to the Google Groups
"Google Web Toolkit" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/google-web-toolkit?hl=en.