How to intercept a "getSession" method?

[Rafael F. Oliveira]

Hi,

I have the following scenario:

---When any method is called I would like to set the user logged in the session before its execution---

I am using Spring + Hibernate. In the "applicationContext.xml" I configured as follows:

...
 	<!-- Hibernate SessionFactory -->
 	<bean id="sessionFactory"
		class="org.springframework.orm.hibernate3.LocalSessionFactoryBean">
		<property name="dataSource">
			<ref local="dataSource" />
		</property>
...
	<!-- Transaction Manager -->
	<bean id="transactionManager"
		class="org.springframework.orm.hibernate3.HibernateTransactionManager">
		<property name="sessionFactory">
			<ref local="sessionFactory" />
		</property>	
	</bean>
...
    <tx:annotation-driven transaction-manager="transactionManager" />
...

I've tried that by implementing the interface Filter like this:

public class HibernateSessionFilter implements Filter {
...
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException,
        try {
            HttpSession httpSession = ((HttpServletRequest) request).getSession();
            Session hibernateSession = null;

            try {
                hibernateSession = factory.getCurrentSession();
            } catch (Exception e) {
            }

            if (hibernateSession != null) {

                Connection con = hibernateSession.connection();

                setUserLogged(httpSession, con) // I'm setting the user logged HERE!!!!!!
            }

            chain.doFilter(request, response);

        } catch (Throwable ex) {
            throw new ServletException(ex);
        }
    }
...

But, it does not work, because if a method calls another methods the user logged is not setted. Any ideas?

Thanks in advance!

[Peter Mularien]

Hi Rafael,

I think you'd want to look at the JavaEE HttpSessionListener functionality, which will notify you when sessions are created and destroyed. You configure this in your deployment descriptor (web.xml)

Best,
Peter

[Rafael F. Oliveira]

Ok, Your suggestion is related to http sessions, How can I intercept the Hibernate Session (openSession method)?

[]'s

[Peter Mularien]

Sorry about that confusion, it wasn't clear in your original question that was what you meant. Can you post the source of the setUserLogged method, and clearly indicate what is not working as you expect?

[Rafael F. Oliveira]

It is necessary because we have a legacy application...

....

    private void setUserLogged(HttpSession httpSession, Connection con) throws SQLException {

        String userID = (String) httpSession.getAttribute(SessionConstants.SESSION_ATTRIBUTE_USER_ID);

        if (userID != null) {

            CallableStatement cstmt = null;

            try {
                cstmt = con.prepareCall("call PKG_VARIABLES.PRC_SET_USER(?)");
                cstmt.setString(1, userID );
                cstmt.execute();
            } catch (SQLException e) {
                e.printStackTrace();;
            } finally {
                try {
                    if (cstmt != null) {
                        cstmt.close();
                    }
                } catch (SQLException e) {
                    e.printStackTrace();
                }
            }
        }
    }
...

[]'s