[jboss-user] [JBoss Seam] - Error in SeamSecurityFilter

[vladimir.kovalyuk]

I realized that when user is accessing a page when it is not logged in, the first thing that is happening is JSF lifecycle due to the error in SeamSecurityFilter:


  |     if (!checkSecurityConstraints(hRequest.getServletPath(), hRequest.getMethod(), ident))
  |       hResponse.sendRedirect(String.format("%s%s", hRequest.getContextPath(), config.getSecurityErrorPage()));
  |     chain.doFilter(request, response);
  | 

Actually 'else' is missed:

  |     if (!checkSecurityConstraints(hRequest.getServletPath(), hRequest.getMethod(), ident))
  |       hResponse.sendRedirect(String.format("%s%s", hRequest.getContextPath(), config.getSecurityErrorPage()));
  |     else
  |         chain.doFilter(request, response);
  | 


View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4005907#4005907

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4005907