JDev 11gR1: Force redirect to certain page upon sucessfull authentication

Question

Hello,
I am following "Enabling ADF Security in a Fusion Web Application" part of fusion developer documentation. I need to make sure that no matter which page is called, that upon successfull authentication, framework redirects user to a certain page, say welcome.jspx
I thought that this is already done in steps "Configure ADF Security" since in web.xml I have this entry:
<servlet>
    <servlet-name>adfAuthentication</servlet-name>
    <servlet-class>oracle.adf.share.security.authentication.AuthenticationServlet</servlet-class>
    <init-param>
      <param-name>success_url</param-name>
      <param-value>/faces/welcome.jspx</param-value>
    </init-param>
    <load-on-startup>1</load-on-startup>
  </servlet>I am using Loginbean and jspx login page as per documentation mentioned above
Any ideas?

Answer 1

Well then I am puzzled how this redirect works. Here is the code from the documentation:
    public String doLogin() {
        String un = _username;
        byte[] pw = _password.getBytes();
        FacesContext ctx = FacesContext.getCurrentInstance();
        HttpServletRequest request =(HttpServletRequest)ctx.getExternalContext().getRequest();
        CallbackHandler handler = new SimpleCallbackHandler(un, pw);
        try {
            Subject mySubject = Authentication.login(handler);
            ServletAuthentication.runAs(mySubject, request);
            ServletAuthentication.generateNewSessionID(request);
            String loginUrl = "/adfAuthentication?success_url=/faces" + ctx.getViewRoot().getViewId();
            System.out.println("loginUrl= "+loginUrl);
            //String loginUrl = "/adfAuthentication?success_url=/faces/welcome.jspx";
            HttpServletResponse response = (HttpServletResponse)ctx.getExternalContext().getResponse();
            System.out.println("requestURI= "+request.getRequestURI());
            sendForward(request, response, loginUrl);
        } catch (FailedLoginException fle) {
            FacesMessage msg = new FacesMessage(FacesMessage.SEVERITY_ERROR,
                                            "Incorrect Username or Password",
                                            "An incorrect Username or Password" +
                                            " was specified");
            ctx.addMessage(null, msg);
            setPassword(null);
            fle.printStackTrace();
        } catch (LoginException le) {
            reportUnexpectedLoginError("LoginException", le);
        return null;
    private void sendForward(HttpServletRequest request,
                              HttpServletResponse response,
                              String forwardUrl){
        FacesContext ctx = FacesContext.getCurrentInstance();
        RequestDispatcher dispatcher = request.getRequestDispatcher(forwardUrl);
        System.out.println("forwardUrl= " + forwardUrl);
        try {
            dispatcher.forward(request, response);
        } catch (ServletException se) {
            reportUnexpectedLoginError("ServletException", se);
        } catch (IOException ie) {
            reportUnexpectedLoginError("IOException", ie);
        ctx.responseComplete();
    private void reportUnexpectedLoginError(String errType, Exception e){
        FacesMessage msg =
        new FacesMessage(FacesMessage.SEVERITY_ERROR, "Unexpected error during login",
                         "Unexpected error during login (" + errType +
                         "), please consult logs for detail");
        FacesContext.getCurrentInstance().addMessage(null, msg);
        //e.printStackTrace();
    }So I call a page birth.jspx (one of my application pages) which is prottected by ADF Security. Framework redirects to LoginPage.jspx, then calls the bean above and upon Authentication redirects to the initially called page birth.jspx
It is not clear to me how this works. I thought that
String loginUrl = "/adfAuthentication?success_url=/faces" + ctx.getViewRoot().getViewId();
will retreive the viewID of the calling page from the context ie birth.jspx but it actually gets LoginPage.jspx so the loginUrl string becomes: "/adfAuthentication?success_url=/faces/LoginPage.jspx"
Thereafter private method sendForward somehow redirects to birth.jspx. How?
I have tried to overwrite loginUrl to "/adfAuthentication?success_url=/faces/welcome.jspx" but this only works (redirects to desired welcome.jspx) if initially called page is LoginPage.jspx