How to do logoff with JSF effectively?

Question

Assumed I have a page called "myWeb.jsp" and there is a commandLink which links to the "logoff.jsp". The "logoff.jsp" looks as follow:
<t:commandLink value="return to login" action="#{logoutBean.doLogout}"></t:commandLink>
The doLogout is in a back bean "logoffbean.java" as follow:
public String doLogout() {
// Invalidate the current session and create a new one
HttpServletRequest request = (HttpServletRequest) FacesContext.getCurrentInstance().getExternalContext().getRequest();
HttpSession session = request.getSession();
session.invalidate();
session = request.getSession(true);
return "login";
How can I do in the "myWeb.jsp" so that if one try to open the "myWeb.jsp" it will jump to the "login.jsp". And if one click the "back" on the browser after logoff it will jump to the "login.jsp" as well?

Answer 1

Off the cuff, I'd say you might be able to implement a Filter that tests if the session is valid. If it is, then it forwards the request to the requested resource, otherwise, redirect the user to the login page.