public void preInvoke(Context context, Servlet servlet,
HttpServletRequest req, HttpServletResponse res)
throws InterceptorException {
// Acquire the WebApplicationDescriptor for this Context
WebApplicationDescriptor descriptor = null;
// XXX - descriptor = context.getWebApplicationDescriptor();
if (descriptor == null)
return;
// Is this request URI subject to a security constraint?
SecurityConstraint constraint = findConstraint(req, descriptor);
if (constraint == null)
return;
// Enforce any user data constraint for this security constraint
userData(req, res, constraint.getUserDataConstraint());
// Authenticate based upon the specified login configuration
authenticate(context, req, res, descriptor.getLoginConfiguration());
// Perform access control based on the specified role(s)
accessControl(context, req, res,
constraint.getAuthorizationConstraint());