how to set public urls on web.xml?

[rodvlopes]

I've got a SecurityFilter set to /* pattern and I need to set the /public/* as a public path. How could it be done?

I can't use the valve approach with security-constraints.

I am following the example given with the waffle-filter project.

<filter>
        <filter-name>SecurityFilter</filter-name>
        <filter-class>waffle.servlet.NegotiateSecurityFilter</filter-class>
        <init-param>
            <param-name>principalFormat</param-name>
            <param-value>fqn</param-value>
        </init-param>
        <init-param>
            <param-name>roleFormat</param-name>
            <param-value>both</param-value>
        </init-param>
        <init-param>
            <param-name>allowGuestLogin</param-name>
            <param-value>false</param-value>
        </init-param>
        <init-param>
            <param-name>securityFilterProviders</param-name>
            <param-value>waffle.servlet.spi.NegotiateSecurityFilterProvider
waffle.servlet.spi.BasicSecurityFilterProvider</param-value>
        </init-param>
        <init-param>
            <param-name>waffle.servlet.spi.NegotiateSecurityFilterProvider/protocols</param-name>
            <param-value>NTLM
Negotiate</param-value>
        </init-param>
        <init-param>
            <param-name>waffle.servlet.spi.BasicSecurityFilterProvider/realm</param-name>
            <param-value>myrealm</param-value>
        </init-param>
    </filter>

    <filter-mapping>
        <filter-name>SecurityFilter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

[dblock]

Did you figure this one out? Bring it up on the mailing list?

[rodvlopes]

Yes I did. I wrote a another filter that manages the public path.

   @Override
   public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {

        String contextPath = ((HttpServletRequest) request).getContextPath();
        String uri = ((HttpServletRequest) request).getRequestURI();
        String url = uri.substring(contextPath.length());

        if (isPulic(url)) {
            log("public - " + url);
            chain.doFilter(request, response);
        } 
        else {
            log("protected - " + url);
            securityFilter.doFilter(request, response, chain);   /*cat jump */
        }

    }


    @Override
    public void init(FilterConfig fConfig) throws ServletException {

        this.filterConfig = fConfig;
        this.publicPath = "^/(public|css|js|images|plugins).*";

        if (this.publicPath != null && this.publicPath.length() > 0)
            this.publicPathPattern = Pattern.compile(this.publicPath, Pattern.CASE_INSENSITIVE);
        else
            log("publicPath has to be set in web.xml");

        this.securityFilter = new NegotiateSecurityFilter();
        this.securityFilter.init(filterConfig);
    }

[dblock]

Thanks, I'll close this. I'd appreciate an FAQ entry maybe on this if you have a moment to contribute one.