Filter will not be invoked

Question

Hi,
my AuthenticationFilter will not be invoked if a session-timeout occurs.
I thougt this ist the place to redirect to the login-page agein or a timeout-page?
That's my code:
<filter>
<filter-name>MyFacesExtensionsFilter</filter-name> <filter-class>org.apache.myfaces.webapp.filter.ExtensionsFilter</filter-class>
<init-param>
<param-name>maxFileSize</param-name>
<param-value>20m</param-value>
</init-param>
</filter>
     <filter>
          <filter-name>AuthFilter</filter-name>
          <filter-class>de.cogitum.rima.util.AuthenticationFilter</filter-class>
     </filter>
     <filter>
          <filter-name>HibernateFilter</filter-name>
          <filter-class>de.cogitum.rima.logic.HibernateFilter</filter-class>
     </filter>     
     <filter-mapping>
          <filter-name>MyFacesExtensionsFilter</filter-name>
          <servlet-name>FacesServlet</servlet-name>
     </filter-mapping>
     <filter-mapping>
          <filter-name>MyFacesExtensionsFilter</filter-name>
          <url-pattern>/faces/myFacesExtensionResource/*</url-pattern>
     </filter-mapping>
     <filter-mapping>
          <filter-name>AuthFilter</filter-name>
          <url-pattern>*.jsf</url-pattern>
          <dispatcher>REQUEST</dispatcher>
          <dispatcher>FORWARD</dispatcher>
          <dispatcher>INCLUDE</dispatcher>
          <dispatcher>ERROR</dispatcher>
     </filter-mapping>     
     <filter-mapping>
          <filter-name>HibernateFilter</filter-name>
          <url-pattern>*.jsf</url-pattern>
     </filter-mapping>
     <servlet>
          <servlet-name>FacesServlet</servlet-name>
          <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
          <load-on-startup>1</load-on-startup>
     </servlet>
     <servlet-mapping>
          <servlet-name>FacesServlet</servlet-name>
          <url-pattern>*.jsf</url-pattern>
     </servlet-mapping>
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
     throws IOException, ServletException
     System.out.println("AuthenticationFilter invoked");
     request.setCharacterEncoding(encoding);
     if (session != null) {
          if (session.getAttribute(validUser) == null && principal != null) {
                FacesContext facesContext = this.getFacesContext(request, response);
              ValueBinding userBean = facesContext.getApplication().createValueBinding("#{UserBean.currentUser}");
             userBean.setValue(facesContext, benutzer);
             session.setAttribute(validUser, "");
              timedOut = false;
     if (sessionIdValid==false && !timedOut) {
                timedOut = true;
              servletResponse.sendRedirect("timeout-refresh.jsp");
        chain.doFilter(request, response);
}I also have a MyFacesExtensionFilter in my web.xml. Does this affect the other filters?
After a timeout occurs the session is destroyed. Then I click on a link in my app, a new session will be created and the filter is never called again...
Thx
HB

Answer 1

Hi all,
I seem to have had inaccurate logging , so my assumption A is false.
Then I have a simple workaround (add a special security attribute value for public documents), and you can forget about my question.
regards,
Rune