在筛选器中注入SessionScoped CDIBean-不为不同会话重新注入？

Question

我有这个问题，我不确定这是否是“预期”行为，但我的问题是：

我有一个Http筛选器：

@WebFilter(filterName = "VerificationFilter", urlPatterns = {"/activation/*"})
public class VerificationFilter implements Filter {
    private static final Logger logger = LoggerFactory.getLogger(VerificationFilter.class);
    private static final String ACTIVATION_CODE_PARAM_KEY = "vc";
    @Inject
    private UserInfo userInfo;
    @Inject
    private ActivationInfo activationInfo;
    @Override
    public void init(FilterConfig filterConfig) throws ServletException {
        logger.debug("************VerificatoniFilter initializing*************");
    }

    /**
     * This filter filters requests by path - anything in the /activate/ namespace will
     * be filtered to first determine if the user has already passed through this filter once.
     * If the user has been "filtered" and the validation code was deemed to be valid, navigation will
     * be permitted to pass through.  If not, then they will be redirected to an error page
     * 
     *  If the user has not yet been filtered, (determined by the presence of details available in the user's
     *  current session), then the filter will check the validation code for validity and/or allow or reject
     *  access.
     *
     */
    @Override
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
        if (!activationInfoPopulated()) {
            String activationCode = request.getParameter(ACTIVATION_CODE_PARAM_KEY);
            if (StringUtils.isEmpty(activationCode)) {
                throwActivationInvalid();
            } else {
                try {
                    ActivationService aService = new ActivationService();
                    ClPersonInfo info = aService.findActivationCodeUser(activationCode);
                    if (info == null) {
                        throwActivationInvalid();
                    }
                    userInfo.setClPersonInfo(info);
                    setActivationInfoPopulated();
                    setActivationValid();
                } catch (ServiceUnavailableException sue) {
                    throw new IamwebApplicationException(sue.getMessage());
                } 
            }
        } else {
            // if the validationCode is not valid, send the user directly to error page.  Else, continue...
            if (!activationInfo.getValidationCodeIsValid()) {
                throw new ActivationCodeInvalidException();
            } 
        }
        // if all is good, continue along the chain
        chain.doFilter(request, response);
    }

    private boolean activationInfoPopulated() {
        return (activationInfo.getValidationCodeChecked());
    }

    private void setActivationInfoPopulated() {
        activationInfo.setValidationCodeChecked(Boolean.TRUE);
    }

    private void setActivationValid() {
        activationInfo.setValidationCodeIsValid(Boolean.TRUE);
    }

    private void setActivationInvalid() {
        activationInfo.setValidationCodeIsValid(Boolean.FALSE);
    }

    private void throwActivationInvalid() throws ActivationCodeInvalidException {
        setActivationInfoPopulated();
        setActivationInvalid();
        throw new ActivationCodeInvalidException();
    }

    @Override
    public void destroy() {
        // TODO Auto-generated method stub

    }

    /**
     * @return the activationInfo
     */
    public ActivationInfo getActivationInfo() {
        return activationInfo;
    }

    /**
     * @param activationInfo the activationInfo to set
     */
    public void setActivationInfo(ActivationInfo activationInfo) {
        this.activationInfo = activationInfo;
    }

    /**
     * @return the userInfo
     */
    public UserInfo getUserInfo() {
        return userInfo;
    }

    /**
     * @param userInfo the userInfo to set
     */
    public void setUserInfo(UserInfo userInfo) {
        this.userInfo = userInfo;
    }   
}

UserInfo和ActivationInfo都是@SessionScope，如下所示：

@Named("activationInfo")
@SessionScoped
public class ActivationInfo implements Serializable {
    private static final Logger logger = LoggerFactory.getLogger(ActivationInfo.class);
    private static final long serialVersionUID = -6864025809061343463L;
    private Boolean validationCodeChecked = Boolean.FALSE;
    private Boolean validationCodeIsValid = Boolean.FALSE;
    private String validationCode;

    @PostConstruct
    public void init() {
        FacesContext context = FacesContext.getCurrentInstance();
        HttpSession session = (HttpSession) context.getExternalContext().getSession(true);
        logger.debug("ActivationInfo being constructed for sessionId:  " + (session == null ? " no session found " : session.getId()));
    }

和

@Named("userInfo")
@SessionScoped
public class UserInfo implements Serializable {
    private static final Logger logger = LoggerFactory.getLogger(UserInfo.class);
    private static final long serialVersionUID = -2137005372571322818L;
    private ClPersonInfo clPersonInfo;
    private String password;

    /**
     * @return the clPersonInfo
     */
    public ClPersonInfo getClPersonInfo() {
        return clPersonInfo;
    }

    @PostConstruct
    public void init() {
        FacesContext context = FacesContext.getCurrentInstance();
        HttpSession session = (HttpSession) context.getExternalContext().getSession(true);
        logger.debug("UserInfo being constructed for sessionId:  " + (session == null ? " no session found" : session.getId()));
    }

当我尝试访问调用过滤器的页面时，我在控制台上看到以下内容：

2014-02-20 21:32:22 DEBUG UserInfo:35 - UserInfo being constructed for sessionId:   no session found
2014-02-20 21:32:22 DEBUG ActivationInfo:27 - ActivationInfo being constructed for sessionId:   no session found 
2014-02-20 21:32:22 DEBUG VerificationFilter:38 - ************VerificatoniFilter initializing*************

如果我转到不同的浏览器并输入“坏”校验码，用户信息/激活信息永远不会重新注入。IE，与不同的会话，我没有看到一个新的UserInfo/ActivationInfo.

我的问题是：1。为什么在构造UserInfo/ActivationInfo时找不到会话（请参阅日志消息）2。我如何实现这一点，以便稍后可以将UserInfo和ActivationInfo注入到我的其他cdibean中，以便它们拥有我需要的user/ActivationInfo？目前由于这个问题，我在VerificationFilter中直接在用户的会话上设置activationInfo，但是当我注入我的CDIBean时，会注入不同的UserInfo和activationInfo。

我正在使用Tomcat7和JEE6，WELD。

提前谢谢！

Answer 1

如果您使用的是Tomcat 7，那么您没有完整的JavaEE 6容器，因此默认情况下JSF和CDI不可用，并且不清楚您是如何设置它们的。

实际上，我希望context.getExtranalContext（）在会话范围的bean中抛出一个NullPointerExcture，因为当过滤器调用bean方法时没有FacesContext。

在FacesServlet有机会设置FacesContext之前调用过滤器。

因此，你的问题似乎是基于不清楚和/或不正确的假设。