Same Url Pattern and Different Filters ?

[Jayaraj Jaganathan]

I have developed a web based application using struts2.
I like to add security filter framework into my application for authentication .

issue:
------
since both filter has same url pattern, my security filter is not called
first it has to go to security filter and then struts2 filter

how to do it ?
please guide me

 <filter>
                <filter-name>struts2</filter-name>
                <filter-class>org.apache.struts2.dispatcher.FilterDispatcher</filter-class>
        </filter>

        <filter-mapping>
                <filter-name>struts2</filter-name>
                <url-pattern>/*</url-pattern>
        </filter-mapping>

   

   <filter>
      <filter-name>Security Filter</filter-name>
      <filter-class>org.securityfilter.filter.SecurityFilter</filter-class>
      <init-param>
         <param-name>config</param-name>
         <param-value>/WEB-INF/securityfilter-config.xml</param-value>
         <description>Configuration file location (this is the default value)</description>
      </init-param>
      <init-param>
         <param-name>validate</param-name>
         <param-value>true</param-value>
         <description>Validate config file if set to true</description>
      </init-param>
   </filter>

 <filter-mapping>
      <filter-name>Security Filter</filter-name>
      <url-pattern>/*</url-pattern>
   </filter-mapping>
  

[Shailesh Narkhede]

Hi,

Declare your security filter before struts2's FilterDispatcher filter.

[Jayaraj Jaganathan]

Shailesh Narkhede wrote:Hi,

Declare your security filter before struts2's FilterDispatcher filter.

the below configuration as you said is not working !!

PLease help me again

 <?xml version="1.0" encoding="UTF-8"?>
<web-app id="WebApp_9" version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">

	<display-name>Struts Blank</display-name>

	<listener>
		<listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
	</listener>
	<context-param>
		<param-name>contextConfigLocation</param-name>
		<param-value>classpath:\spring.xml</param-value>
	</context-param>

	<listener>
		<listener-class>org.springframework.web.context.request.RequestContextListener</listener-class>
	</listener>

	<listener>
		<listener-class>com.common.listeners.SessionListener</listener-class>
	</listener>

	<listener>
		<listener-class>com.common.listeners.ContextListener</listener-class>
	</listener>

	<listener>
		<listener-class>com.common.listeners.RequestListener</listener-class>
	</listener>

	<listener>
		<listener-class>org.apache.struts2.tiles.StrutsTilesListener</listener-class>
	</listener>
	<context-param>
		<param-name>org.apache.tiles.impl.BasicTilesContainer.DEFINITIONS_CONFIG</param-name>
		<param-value>/WEB-INF/tiles.xml</param-value>
	</context-param>

	<filter>
		<filter-name>Security Filter</filter-name>
		<filter-class>org.securityfilter.filter.SecurityFilter</filter-class>
		<init-param>
			<param-name>config</param-name>
			<param-value>/WEB-INF/securityfilter-config.xml</param-value>
			<!--
				<description>Configuration file location (this is the default
				value)</description>
			-->
		</init-param>
		<init-param>
			<param-name>validate</param-name>
			<param-value>true</param-value>
			<!--<description>Validate config file if set to true</description>-->
		</init-param>
		<!--
			<init-param> <param-name>loginSubmitPattern</param-name>
			<param-value>/logMeIn</param-value> <description> As an example a
			login form can define "logMeIn" as it action in place of the standard
			"j_security_check" which is a special flag user by app servers for
			container managed security. </description> </init-param>
		-->
	</filter>

	<!--
		map all requests to the SecurityFilter, control what it does with
		configuration settings
	-->
	<filter-mapping>
		<filter-name>Security Filter</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>

	<filter>
		<filter-name>struts2</filter-name>
		<filter-class>org.apache.struts2.dispatcher.FilterDispatcher</filter-class>
	</filter>

	<filter-mapping>
		<filter-name>struts2</filter-name>
		<url-pattern>/*</url-pattern>
	</filter-mapping>

	<session-config>
		<session-timeout>60</session-timeout>
	</session-config>

</web-app>
   

[Jayaraj Jaganathan]

Jayaraj Jaganathan wrote:

the below configuration as you said is not working !!

PLease help me again

its working . i have tested it . sorry for my previous reply