Access session scoped JSF managed bean in web filter

jsf servlet-filters managed-bean session-scope
user1997553 picture user1997553 · Jan 22, 2013 · Viewed 13.3k times · Source

I have SessionScoped bean called userSession to keep track of the user ( username, ifLogged, etc). I want to filter some pages and therefore I need to access the bean from the webFilter I created. How do I do that? I looks like its even impossible to import the bean to be potenitally visible.

Answer

BalusC picture BalusC · Jan 22, 2013

Under the covers, JSF stores session scoped managed beans as an attribute of the HttpSession with the managed bean name as key.

So, provided that you've a @ManagedBean @SessionScoped public class User {}, just this should do inside the doFilter() method:

HttpSession session = ((HttpServletRequest) request).getSession(false);
User user = (session != null) ? (User) session.getAttribute("user") : null;

if (user != null && user.isLoggedIn()) {
    // Logged in.
}

Or, if you're actually using CDI instead of JSF to manage beans, then just use @Inject directly in the filter.

See also:

Related questions

How implement a login filter in JSF?

I would like to block the access of some page even if the user knows the url of some pages. For example, /localhost:8080/user/home.xhtml (need to do the login first) if not logged then redirect to /index.xhtml. …

Read More
Handling 'session expired' in JSF web application, running in JBoss AS 5

This question is related to my other question "How to redirect to Login page when Session is expired in Java web application?". Below is what I'm trying to do: I've a JSF web application running on JBoss AS 5 When the …

Read More
How control access and rights in JSF?

I would like to control the access after the user log in my system. For example: administrator : can add, delete and give rights to employee employee : fill forms only ... So after knowing which right the user has, checking in database, …

Read More