getUserPrincipal() is null

[nagasheshu]

Authorization is working fine but

request.getUserPrincipal(); is pointing to null

I am using DatabaseServerLoginModule.

can any body help me or if you are having any working code. please send it to me.

[ben2]

Make sure that the servlet that you are calling this from is in a secure context. Even when a user has logged in if they are viewing an unsecured page getUserPrincipal() will return null.

A poor design in my opinion.

[kchobantonov]

You can use a filter for change the default behaviour og getUserPrincipal and isUserInRole in non secured zone (an of course after success login) also you may enable calls to secured EJBs see http://www.luminis.nl/publications/websecurity.html