The security context object is used to programmatically check a user's authority to access a specific resource. This is very useful when you need to do some custom behavior upon having an invalid request from the user, rather than the default one specified by the security API.
In the following example, we're going to forward the user to another page if, and only if, they have access to this page:
@WebServlet("/home")
public class HomeServlet extends HttpServlet {
@Inject
private SecurityContext securityContext;
@Override
protected void doGet(HttpServletRequest req, HttpServletResponse
resp)
throws ServletException, IOException {
if (securityContext.hasAccessToWebResource("/anotherServlet",
"GET")) {
req.getRequestDispatcher("/anotherServlet").forward(req,
res);
} else {
req.getRequestDispatcher("/logout").forward(req, res);
}
}
} As you can see, we have used the CDI's...