i use jsp page,not jsf.

i want to know AuthenticationStatus in a jsp page.

for example, i inject HttpSession session into Authenticator Class.

---------------------------------------------------

public class SimpleAuthenticator extends BaseAuthenticator implements Authenticator {

   @Inject Credentials credentials;

   @Inject HttpSession session;

   @Override

   public void authenticate() {

      if ("demo".equals(credentials.getUsername()) &&

            credentials.getCredential() instanceof PasswordCredential &&

            "demo".equals(((PasswordCredential) credentials.getCredential()).getValue()))  {

         setStatus(AuthenticationStatus.SUCCESS);

         setUser(new SimpleUser("demo"));

         System.out.println("SUCCESS.");

         ********************************************

         session.setAttribute("islogin", "YES");// i keep islogin status in session

         ********************************************

      }else{

          setStatus(AuthenticationStatus.FAILURE);

          System.out.println("FAILURE.");

          session.setAttribute("islogin", "NO");

      }

   }

}

---------------------------------------------------

my question is:

after user login succeed and before session timeout,

if AuthenticationStatus is same width session("islogin")?