Tomcat approach to valves

[anil.saldhana]

Here is an interesting revelation with reference to long term strategy with Tomcat valves.

Valves will have to make their way for filters.

http://mail-archives.apache.org/mod_mbox/tomcat-dev/200511.mbox/browser

We have used valves mainly for security and SSO.

I am wondering if filters will provide us the needed hooks into Tomcat.....

[starksm64]

Where exactly is the discussion?

[anil.saldhana]

Just an opinion of Yoav (Core tomcat developer). Wonder if it is shared by the tomcat dev community in general.
http://marc.theaimsgroup.com/?l=tomcat-dev&m=113096727114985&w=2

[starksm64]

I don't see how valves can be done away with in general without a significant change to the filter layer or complete externalization of the authentication layer via 196.

[anil.saldhana]

I do not think Valves are overengineered. They are powerful integration hooks into the catalina container.

The catalina connector request and response objects that engulf the HttpServletRequest and HttpServletResponse objects, may be big, with too much information.