Servlet Filter problems

[Christopher McCauley]

Greetings,

I am trying to use a servlet filter to detect for session timeout in order to redirect back to the login page.

Question 1. how to capture the HTTP page they were 'on' (which I assume will be in the history) when the session expired in order to bring tham back after they log in?

Question 2. In Filter Chaining, how do I specify multiple resources in the web.xml, to avoid looking at .gif, .jpg, etc.

Here's the initial Filter:

 
public class LoginFilter extends HttpServlet implements Filter {
    
//Instance Fields
private FilterConfig filterConfig;
  
     /**
      * @param FilterConfig
      */
     public void init(FilterConfig filterConfig) {
       this.filterConfig = filterConfig;
     }
     
     /**
      * @param ServletRequest
      * @param ServletResponse
      * @param FilterChain
      * @throws IOException, ServletException 
      */
     public void doFilter(ServletRequest request,
       ServletResponse response,
       FilterChain filterChain) throws IOException, ServletException {
     
     HttpServletRequest httpRequest = null;
     httpRequest = (HttpServletRequest)request;
     
     filterConfig.getServletContext().log("LoginFilter checking for session objects...");
     
     try {
     if(!httpRequest.getRequestURI().equals("/supplierreportcard/login/login.jsp"))
     if (httpRequest.getSession().getAttribute("userContainer")==null){
     filterConfig.getServletContext().log("Session Timed Out - Filter Redirect to Login");
     RequestDispatcher rd = request.getRequestDispatcher("/login/login.jsp");
     rd.forward(request, response);
     }
     filterConfig.getServletContext().log("LoginFilter found needed session objects...");
       //call next filter in chain
        filterChain.doFilter(request, response);
        
   } catch (IOException io){
   filterConfig.getServletContext().log(io, "Error 1");
   } catch (ServletException se){
   filterConfig.getServletContext().log(se, "Error 1");
   }
     }
 
     //Clean up resources
     public void destroy() {
       filterConfig=null;
     }
}
 

AND the web.xml:

  
 
<filter>
   <filter-name>LoginFilter</filter-name>
   <display-name>supplierreportcard/LoginFilter</display-name>
   <description>Used to verify the user session and login</description>
   <filter-class>gov.gsa.fssonline.cm.util.LoginFilter</filter-class>
</filter>
 
<filter-mapping>
<filter-name>LoginFilter</filter-name>
<url-pattern>/*.do</url-pattern>
</filter-mapping>
 
<filter-mapping>
        <filter-name>LoginFilter</filter-name>
<url-pattern>/*.jsp</url-pattern>
</filter-mapping>

Am I in the BallPark?

[Ben Souther]

Question 1. how to capture the HTTP page they were 'on' (which I assume will be in the history) when the session expired in order to bring tham back after they log in?

What history?
Why not just store the URL of the page they were requesting and bring them back to that one after they log in?

Question 2. In Filter Chaining, how do I specify multiple resources in the web.xml, to avoid looking at .gif, .jpg, etc.

The web.xml that you posted looks like it will do just that.
You're filtering requests for servlets and JSPs.