Custom Tag Authentication

Question

Hello Everyone,
Quick question. If I want to redirect a user to a login.html page if they're not logged on and they are trying to use a resource, what is the best way to go about it? Should I page the bean value attribute to the tag and then just embed boolean values in the page with the pageContext.setAttribute(..)? Or is there a better way to go about it, since I'm just not sure with the way that the tag returns values (SKIP, etc.).
Thanks a lot,
Lior

Answer 1

If you have multiple filters, you can have your security one determine whether or not to continue with the chain or not. Code example:
chain.doFilter(request, response);
That continues in the chain of filters, if there are anymore. If you want to short circuit that and send the user somewhere else, simple don't call that method and either forward the user to another resource from the request object, or use a sendRedirect on the response object to send them to wherever.
EXample:
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
                    throws java.io.IOException, ServletException
          if (something==true)
               // continue through other filters (if anymore)
               chain.doFilter(request, response);
          else
               // failed test, redirect (or forward) to another page/resource
               response.sendRedirect("/loginpage.jsp") ;
               return ;
     }