[prev in list] [next in list] [prev in thread] [next in thread] 

List:       tomcat-user
Subject:    Re: request.getUserPrincipal() is null but StandardSession.principal is set
From:       Konstantin Kolinko <knst.kolinko () gmail ! com>
Date:       2015-01-26 14:20:51
Message-ID: CABzHfVmiGZGMx0GYLNA4AnBa+3OVYShg6sRczvFsvOmspt0bOw () mail ! gmail ! com
[Download RAW message or body]

2015-01-26 15:10 GMT+03:00 Thomas Strauß <t.strauss@srs-management.de>:
> 
> -----Ursprüngliche Nachricht-----
> > Von: Konstantin Kolinko [mailto:knst.kolinko@gmail.com]
> > Gesendet: Montag, 26. Januar 2015 13:01
> > An: Tomcat Users List
> > Betreff: Re: request.getUserPrincipal() is null but StandardSession.principal is \
> > set
> 
> > The stacktrace above does not have FormAuthenticatorValve,  so there is no wonder \
> > that request has not been authenticated yet. 
> > There is the following change for 7.0.22 in the changelog file:
> > 
> > [quote]
> > Correct a regression with the fix for 51653 that broke custom error pages for 4xx \
> > responses from the Authenticators. Error handling and > request listeners are now \
> > handled in the StandardHostValve to ensure they wrap all Context level activity. \
> > (markt) [/quote]
> 
> Yes, maybe obvious for you, and is clear now for me, but the side effect, that \
> authentication is no longer available to a request listener would have saved me \
> some hours. Anyway, thanks for helping out. 
> I will rewrite the listener to a filter then, as I see no other possibility here.
> 

Generally Filter is a better defined interface. People have different
expectations on RequestListener behaviour. (A recent discussion was in
https://issues.apache.org/bugzilla/show_bug.cgi?id=57314 )

Best regards,
Konstantin Kolinko

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


[prev in list] [next in list] [prev in thread] [next in thread]