[jboss-user] [JBoss Seam] - conditional redirect on exception - how?
My application requires two-stage authentication. I must "login", but after
logging in, the user must choose a "client" and is not permitted to access any
of the rest of the application until she/he does so. I've managed to restrict access
to my pages with EL expressions, for example:
| <page view-id="/home.xhtml">
| <restrict>#{(not empty authenticator.currentClient)}</restrict>
| </page>
|
and have added navigation rules on my login.page.xml to redirect to a page to set this
value if the login process itself does not set it:
| <navigation from-action="#{identity.login}">
| <rule if="#{identity.loggedIn and (empty currentClient)}">
| <redirect view-id="/ChooseClient.xhtml"/>
| </rule>
| <rule if="#{identity.loggedIn and (not empty currentClient)}">
| <redirect view-id="/home.xhtml"/>
| </rule>
| </navigation>
|
So far so good -- I am directed to the ChooseClient page at the proper times, and if I
attempt to access a protected page before setting the currentClient (e.g. via a bookmark
or manually typing a url), I get the desired AuthorizationException. However, what I want
to happen is on attempt to access a restricted page, redirect to the ChooseClient page if
the restriction was because the client wasn't choosen (as opposed to simply not having
the proper role).
I've tried adding an EL expression on the redirect in pages.xml:
| <exception
class="org.jboss.seam.security.AuthorizationException">
| <redirect view-id="#{(empty authenticator.currentClient) ?
'/ChooseClient.xhtml' : '/error.xhtml'}">
| <message>You don't have permission to do this</message>
| </redirect>
| </exception>
|
Unfortunately, that doesn't work - when I trigger the exception, JSF pukes:
20:23:55,256 FATAL [application] JSF1010: Illegal view ID #{(empty
authenticator.currentClient) ? '/ChooseClient.xhtml' : '/error.xhtml'}.
The ID must begin with '/'
So I tried unconditionally redirecting to a facelet that redirects:
| <!DOCTYPE composition PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
| <ui:composition xmlns="http://www.w3.org/1999/xhtml"
| xmlns:c="http://java.sun.com/jstl/core"
| xmlns:ui="http://java.sun.com/jsf/facelets"
| template="/WEB-INF/facelets/templates/template.xhtml">
|
| <c:choose>
| <c:when test="#{empty authenticator.currentClient}">
| <c:redirect url="/ChooseClient.xhtml"/>
| </c:when>
| <c:otherwise>
| <c:redirect url="/error.xhtml"/>
| </c:otherwise>
| </c:choose>
|
| </ui:composition>
But that fails with a facelet compiler error(!?) saying:
| /maybeChooseClient.xhtml @16,41 <c:redirect> Tag Library supports namespace:
http://java.sun.com/jstl/core, but no tag was defined for name: redirect
|
(despite the fact that the facelet doc claims to implement the "core" JSTL
library with only a few restrictions - not being mentioned.
So... I can't find any way to conditionally redirect on exception. Ideas?
JSF 1.2
JBoss AS 4.2.1
Seam 1.2.1-GA
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4075053#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...