Hi Raghuram and Raul,
thanks for your tips!!!
I tried the caching tips, but the didnt worked on my apple using safari browser!
Tip 1 did not help
<%
response.setHeader ("cache-control", "no-cache");
response.setHeader ("expires", "-1");
%>
Tip 2: did not help
and the configuration in struts-config.xml did not work either: According to dtd I set the paramater nocache="true" in th
controller.
Then I checked Rahuls Tip "Struts-workflow extension", seems to be a very good package.
I checked what it was doing, but unfortunately it collidated with my own SecurityProcessor.
After getting a glimpse whats is happening (after your tips), I finally added a new Hook to processPreprocess, checking for for valid Tokens
(but only if there is a local forward configured for my action named "tokeninvalid").
If somebody is interested:
public class SecureRequestProcessor extends TilesRequestProcessor
{
protected boolean processPreprocess(HttpServletRequest request, HttpServletResponse response)
{
return checkValidToken(request, response);
}
private boolean checkValidToken(HttpServletRequest request, HttpServletResponse response)
{
boolean success = true;
try
{
// Can do processPath without validation, since this has alreade beeing
// done in the superclass
String path = processPath(request, response);
// Identify the mapping for this request
ActionMapping mapping = processMapping(request, response, path);
if (mapping != null)
{
ForwardConfig forward = mapping.findForwardConfig("tokennotvalid");
// Does this action want tokenchecking by this method
// than it defined a forward "tokennotvalid"
if (forward != null)
{
if (!token.isTokenValid(request, true))
{
log.info("TokenInvalid for Action[" + mapping.getPath() + "]. Forwarding to ["
+ forward.getPath() + "]");
processForwardConfig(request, response, forward);
}
}
}
} catch (IOException ioe)
{
log.error("IOException im processPreprocess call: IOException Message=" + ioe.getMessage());
success = false;
} catch (ServletException se)
{
log.error("ServletException im processPreprocess call: ServletException Message=" + se.getMessage());
success = false;
} catch (Exception e)
{
log.error("Exception im processPreprocess call: Exception Message=" + e.getMessage());
success = false;
}
return success;
}
}
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
