I don't know your application scenario, but in general, authetication is not the same 
as a session state. 

Authetication can be implemented in a filter. 

Hope this helps.

Vernon
--

--------- Original Message ---------

DATE: Wed, 17 Sep 2003 15:49:41
From: "Shapira, Yoav" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Cc: 

>
>Howdy,
>
>>all pages i do a checkAuthetication .. how do i check if the session is
>>active or not ? .. so that i can detect that and redirect them to the
>
>Hmm... I would do this using attributes.  All attributes are unbound
>when the session is invalidated.  So add an attribute to the session
>when you authenticate people, and check for that attribute in your
>pages.  If it's not present, redirect them to the authentication page.
>
>Yoav Shapira
>
>
>
>This e-mail, including any attachments, is a confidential business communication, and 
>may contain information that is confidential, proprietary and/or privileged.  This 
>e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
>saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
>intended recipient, please immediately delete this e-mail from your computer system 
>and notify the sender.  Thank you.
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>
>



____________________________________________________________
University of Phoenix Online. Free Information - Online Classes
http://r.hotbot.com/r/lmt_uopo/http://servedby.advertising.com/click/site=563632/mnum=125825
This offer applies to U.S. Residents Only

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to