rapture.server.web.servlet

Class SessionControlServlet

java.lang.Object

javax.servlet.GenericServlet

javax.servlet.http.HttpServlet

rapture.server.web.servlet.BaseServlet

rapture.server.web.servlet.SessionControlServlet

All Implemented Interfaces:

java.io.Serializable, javax.servlet.Servlet, javax.servlet.ServletConfig

public class SessionControlServlet
extends BaseServlet

The session control servlet is used to manage login, logout and redirection. Basically the main work is done in a Reflex script (provided externally) which should be manipulating an object that is injected into the Reflex scope. We look at that scope afterwards and take appropriate action - usually setting cookies and redirecting. If we don't redirect we output the println output of the script (like ReflexScriptPageServlet) Note that scripts run from this servlet are usually run without context checking, so care needs to be taken to set both the script context (to a place where scripts are very readonly) and on what the script can actually do. Putting a bad script in the system could easily be used to login. In this way the scripts cannot be nested, and the api is limited to the login api.

See Also:

Serialized Form

Constructor Summary

Constructors

Constructor and Description
SessionControlServlet()

Method Summary

Modifier and Type	Method and Description
void	doGet(javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse resp)
protected java.lang.String	getReflexScript(java.lang.String uri)
void	init()
protected ResponseControl	runScriptWithResponseControl(java.lang.String script, java.util.Map<java.lang.String,java.lang.Object> parameterMap, ResponseControl control, javax.servlet.http.HttpServletResponse resp)

Methods inherited from class rapture.server.web.servlet.BaseServlet

getByteContentFromPart, getFullContent, getParams, getSessionContext, handleUnexpectedException, processFunctionalRequest, sendResponseAppropriately, validateContext

Methods inherited from class javax.servlet.http.HttpServlet

doDelete, doHead, doOptions, doPost, doPut, doTrace, getLastModified, service, service

Methods inherited from class javax.servlet.GenericServlet

destroy, getInitParameter, getInitParameterNames, getServletConfig, getServletContext, getServletInfo, getServletName, init, log, log

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SessionControlServlet

public SessionControlServlet()

Method Detail

init

public void init()
          throws javax.servlet.ServletException

Overrides:

init in class javax.servlet.GenericServlet

Throws:

javax.servlet.ServletException

doGet

public void doGet(javax.servlet.http.HttpServletRequest req,
                  javax.servlet.http.HttpServletResponse resp)
           throws java.io.IOException

Overrides:

doGet in class javax.servlet.http.HttpServlet

Throws:

java.io.IOException

runScriptWithResponseControl

protected ResponseControl runScriptWithResponseControl(java.lang.String script,
                                                       java.util.Map<java.lang.String,java.lang.Object> parameterMap,
                                                       ResponseControl control,
                                                       javax.servlet.http.HttpServletResponse resp)
                                                throws java.io.IOException

Throws:

java.io.IOException

getReflexScript

protected java.lang.String getReflexScript(java.lang.String uri)