BUG: Principal ist not is session scope after WebAuthenticat

[alexeev.net]

Hi all,

I can successfully login using WebAuthentication.login() in my JSF Bean on JBoss 4.2.3.GA.

Retrieving Principal in the same request works also fine:
FacesContext.getCurrentInstance().getExternalContext().getUserPrincipal ()

But later in subsequent requests the Principal is always null.

Bug or feature?

[alexeev.net]

I have double checked the code.

There are no session.invalidate() and no webAuthentication.logout() calls in between.

Any ideas?

[alexeev.net]

up?..

[anil.saldhana]

Maybe the session is turning out to be different. What we are dealing with is the Tomcat session at the server. Now if the JSF bean changes anything in the request to indicate a different session, then the previous authentication is lost.

I am not an expert in JSF. So I cannot answer if this is a bug.