"remember me" requires refresh?

[Luke Taylor]

Good

Like I said though, if you're still early on in development you should try and upgrade 'cos SecureContextUtils, SecureContextImpl etc. don't exist anymore. Probably better not to lock yourself into an outdated syntax if you don't need to.

[dlevine]

hehehehe... an excellent suggestion! =)

[dlevine]

first off, I am still using v. 0.8.2 and I need to keep that for now.

When i switched from using request.getSession().getAttribute("ACEGI_SECURITY_ CONTEXT") to using SecureContextUtils.getSecureContext() it did fix the problem of "remember me requires refresh". However, I am now getting an exception when I hit some pages. It doesnt seem to affect anything (everything seems to work), but I'd like to figure out what is going on.

java.lang.IllegalStateException: ContextHolder invalid: 'null': are your filters ordered correctly? HttpSessionContextIntegrationFilter should have already executed by this time (look for it in the stack dump below)

[full stack trace below]

My filter chain looks like this:

	<bean id="filterChainProxy"
		class="net.sf.acegisecurity.util.FilterChainProxy">
		<property name="filterInvocationDefinitionSource">
			<value> CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
				PATTERN_TYPE_APACHE_ANT
				/**=HttpSessionContextFilter,AuthenticationProcessingFilter,rememberMeProcessingFilter,SecurityEnforcementFilter
			</value>
		</property>
	</bean>

So it should be hitting the HttpSessionContextFilter first. Why would SecureContextUtils.getSecureContext() be throwing that exception (only on certain pages, repeatable) when I call it to get the Context?

Heres' the full stack trace...

13:43:37,781 ERROR [localhost]:373 - Exception Processing ErrorPage[errorCode=404, location=/pageHandler.htm]
java.lang.IllegalStateException: ContextHolder invalid: 'null': are your filters ordered correctly? HttpSessionContextIntegrationFilter should have already executed by this time (look for it in the stack dump below)
	at net.sf.acegisecurity.context.security.SecureContextUtils.getSecureContext(SecureContextUtils.java:38)
	at tv.current.web.studio.security.SecurityHelper.getCurrentUsername(SecurityHelper.java:39)
	at org.apache.jsp.WEB_002dINF.jsp.site.studioPageHandler_jsp._jspService(org.apache.jsp.WEB_002dINF.jsp.site.studioPageHandler_jsp:95)
	at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:97)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
	at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:322)
	at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:291)
	at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:241)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
	at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:672)
	at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:465)
	at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:398)
	at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:301)
	at org.springframework.web.servlet.view.InternalResourceView.renderMergedOutputModel(InternalResourceView.java:97)
	at org.springframework.web.servlet.view.AbstractView.render(AbstractView.java:250)
	at org.springframework.web.servlet.DispatcherServlet.render(DispatcherServlet.java:928)
	at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:705)
	at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:625)
	at org.springframework.web.servlet.FrameworkServlet.serviceWrapper(FrameworkServlet.java:386)
	at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:346)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:689)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
	at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:672)
	at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:465)
	at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:398)
	at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:301)
	at org.apache.catalina.core.StandardHostValve.custom(StandardHostValve.java:362)
	at org.apache.catalina.core.StandardHostValve.status(StandardHostValve.java:283)
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:136)
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
	at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856)
	at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:744)
	at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
	at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
	at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
	at java.lang.Thread.run(Unknown Source)

[Luke Taylor]

Well, it should be "HttpSessionContextIntegrationFilter" for a start.

There aren't any acegi filters in this stack trace. It's going straight from the container doFilter method into the JSP-specific stuff. Are you sure you're applying the filters properly in your web.xml?