question : why not using Security.isConnected()

[sdenef]

Hello,

In the method filter() why using this ? if (session.contains("username")) {

Why not using this code ? if (Security.isConnected()) {

[sim51]

Because in your application, you have to override security class !! (to perform the security of your application) !

When you do that, you can override everything you want on the following method :

• isConnected
• onAuthenticate

That's why, I prefer to do this check directly into the filter (and not into Security class).

If you look at line 94, I put manually the username in session, and after I invoke "Security.onAuthenticated()". It's a personal choice.

To do what you want, I have to change :

• line 94 : session.put("username", user.getUsername());
• line 137: if (session.contains("username"))

[sdenef]

OK. I understand.