Jsp sites access control

Question

Hi,
i am new in web-app-programming.
I have developed a few jsp pages. One of them is login page and the other should only be accessable after logging in the login page.
The current state is: the pages can also be accessed directly with the url like this: "http://localhost:8080/application_root/my_url_pattern/somepage.jsp".
I am looking for a solution to avoid the direct access per url.
my ideas are:
1) set the render control of the jsp site-> it works well-> but a bit complex
2) out source the jsp site -> save the jsp sites somewhere else as the applicationroot-> I have the problem that the site could no be found. Can somebody tell me how can i solve this problem.
thank u
Ming
Message was edited by:
m_z

Answer 1

You can set up a servlet filter in the web.xml. That lets you intercept every single request to certain areas of the app, and modify/redirect it if necessary.
Example: This sets up a filter that runs on all requests to the "/tools" directory:
In web.xml:
   <filter>
     <filter-name>testFilter</filter-name>
     <filter-class>com.TestFilter</filter-class>
   </filter>
   <filter-mapping>
     <filter-name>testFilter</filter-name>
     <url-pattern>/tools/*</url-pattern>
   </filter-mapping>And an example java class of a filter. This one just logs the request URI.
package com;
import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
public class TestFilter implements Filter{
     public void init(FilterConfig arg0) throws ServletException {}
     public void destroy() {}
     public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
          if (request instanceof HttpServletRequest){
               HttpServletRequest req = (HttpServletRequest)request;
               System.out.println("Servicing request for " + req.getRequestURI());
               chain.doFilter(request, response);
}