Httpsession with Spring 3 MVC
- by vipul12389
I want to use httpsession in Spring 3 MVC..i have searched all the web and got this solution..at http://forum.springsource.org/showthread.php?98850-Adding-to-stuff-to-the-session-while-using-ResponseBody
Basically, My application auto authenticates user by getting winId and authorizes through LDAP..(Its a intranet site)
Here is the flow of the application,
1. User enters Aplication url (http://localhost:8082/eIA_Mock_5)
it has a welcome page (index.jsp)
Index.jsp gets winId through jQuery and hits login.html (through Ajax) and passes windowsId
login.html (Controller) authenticates through LDAP and gives back 'Valid' String as a response
javascript, upon getting the correct response, redirects/loads welcome page i.e. goes to localhost:8082/eIA_Mock_5/welcome.html
Now, i have filter associated with it..which checks for is session valid for each incoming request..Now the problem is even though i set data on to httpsession, yet the filter or any other controller fails to get the data through session as a result it doesnt proceeds further..
here is the code..and could you suggest what is wrong actually ??
Home_Controller.java
@Controller
public class Home_Controller {
public static Log logger = LogFactory.getLog(Home_Controller.class);
@RequestMapping(value={"/welcome"})
public ModelAndView loadWelcomePage(HttpServletRequest request,HttpServletResponse response)
{
ModelAndView mdv = new ModelAndView();
try{
/*HttpSession session = request.getSession();
UserMasterBean userBean = (UserMasterBean)session.getAttribute("userBean");
String userName=userBean.getWindowsId();
if(userName==null || userName.equalsIgnoreCase(""))
{
mdv.setViewName("homePage");
System.out.println("Unable to authenticate user ");
logger.debug("Unable to authenticate user ");
}
else
{
System.out.println("Welcome User "+userName);
logger.debug("Welcome User "+userName);
*/
mdv.setViewName("homePage");
/*}*/
}
catch(Exception e){
logger.debug("inside authenticateUser ",e);
e.printStackTrace();
}
return mdv;
}
@RequestMapping(value = "/login", method = RequestMethod.GET)
public @ResponseBody String authenticateUser(@RequestParam String userName,HttpSession session)
{
logger.debug("inside authenticateUser");
String returnResponse=new String();
try{
logger.debug("userName for Authentication "+userName);
System.out.println("userName for Authentication "+userName);
//HttpSession session = request.getSession();
if(userName==null || userName.trim().equalsIgnoreCase(""))
returnResponse="Invalid";
else
{
System.out.println("uname "+userName);
String ldapResponse = LDAPConnectUtil.isValidActiveDirectoryUser(userName, "");
if(ldapResponse.equalsIgnoreCase("true"))
{
returnResponse="Valid";
System.out.println(userName+" Authenticated");
logger.debug(userName+" Authenticated");
UserMasterBean userBean = new UserMasterBean();
userBean.setWindowsId(userName);
//if(session.getAttribute("userBean")==null)
session.setAttribute("userBean", userBean);
}
else
{
returnResponse="Invalid";
//session.setAttribute("userBean", null);
System.out.println("Unable to Authenticate the user through Ldap");
logger.debug("Unable to Authenticate the user through Ldap");
}
System.out.println("ldapResponse "+ldapResponse);
logger.debug("ldapResponse "+ldapResponse);
System.out.println("returnResponse "+returnResponse);
}
UserMasterBean u = (UserMasterBean)session.getAttribute("userBean");
System.out.println("winId "+u.getWindowsId());
}
catch(Exception e){
e.printStackTrace();
logger.debug("Exception in authenticateUser ",e);
}
return returnResponse;
}
Filter
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
{
System.out.println("in PageFilter");
boolean flag = false;
HttpServletRequest objHttpServletRequest = (HttpServletRequest)request;
HttpServletResponse objHttpServletResponse = (HttpServletResponse)response;
HttpSession session = objHttpServletRequest.getSession();
String contextPath = objHttpServletRequest.getContextPath();
String servletPath = objHttpServletRequest.getSession().getServletContext().getRealPath(objHttpServletRequest.getServletPath());
logger.debug("contextPath :" + contextPath);
logger.debug("servletPath :" + servletPath);
System.out.println("in PageFilter, contextPath :" + contextPath);
System.out.println("in PageFilter, servletPath :" + servletPath);
if (servletPath.endsWith("\\") || servletPath.endsWith("/") ||
servletPath.indexOf("css") > 0 || servletPath.indexOf("jsp") > 0 ||
servletPath.indexOf("images") > 0 || servletPath.indexOf("js") > 0 ||
servletPath.endsWith("index.jsp") || servletPath.indexOf("xls") > 0 ||
servletPath.indexOf("ini") > 0 || servletPath.indexOf("login.html") > 0 ||
/*servletPath.endsWith("welcome.html") ||*/ servletPath.endsWith("logout.do") )
{
System.out.println("User is trying to access allowed pages like Login.jsp, errorPage.jsp, js, images, css");
logger.debug("User is trying to access allowed pages like Login.jsp, errorPage.jsp, js, images, css");
flag = true;
}
if (flag== false)
{
System.out.println("flag = false");
if(session.getAttribute("userBean") == null)
System.out.println("yes session.userbean is null");
if ((session != null) && (session.getAttribute("userBean") != null))
{
System.out.println("session!=null && session.getAttribute(userId)!=null");
logger.debug("IF Part");
UserMasterBean userBean = (UserMasterBean)session.getAttribute("userBean");
String windowsId = userBean.getWindowsId();
logger.debug("User Id " + windowsId + " allowed access");
System.out.println("User Id " + windowsId + " allowed access");
flag = true;
}
else
{
System.out.println("else .....session!=null && session.getAttribute(userId)!=null");
logger.debug("Else Part");
flag = false;
}
}
if (flag == true) {
try {
System.out.println("before chain.doFilter(request, response)");
chain.doFilter(request, response);
} catch (Exception e) {
e.printStackTrace();
try {
objHttpServletResponse.sendRedirect(contextPath + "/logout.do");
} catch (Exception ex) {
ex.printStackTrace();
}
}
}
else {
try
{
System.out.println("before sendRedirect");
objHttpServletResponse.sendRedirect(contextPath + "/jsp/errorPage.jsp");
} catch (Exception ex) {
ex.printStackTrace();
}
}
System.out.println("end of PageFilter");
}
Index.jsp
<script type="text/javascript">
//alert("inside s13");
var WinNetwork = new ActiveXObject("WScript.Network");
var userName=WinNetwork.UserName;
alert(userName);
$.ajax({
url : "login.html",
data : "userName="+userName,
success : function(result) {
alert("result == "+result);
if(result=="Valid")
window.location = "http://10.160.118.200:8082/eIA_Mock_5/welcome.html";
}
});
</script>
web.xml has a filter entry with URL pattern as *
I am using spring 3 mvc
