+ }
+
+ /**
+ * Due to a serious shortcoming of Tomcat 3.3, an extra sessionid parameter is
+ * generated into open session urls. Tomcat 3.3 makes it impossible to
+ * distinguish between sessions that are identified using a url and those
+ * that are identified using cookies: if both a sessionid cookie and a sessionid
+ * url are available, tomcat 3.3 pretends the url wasn't there...
+ */
+ private static final String SESSION_REQUEST_KEY="sessionid";
+
+ /**
+ * Determines the Locale to be used for the current session
+ */
+ protected Locale getResponseLocale(HttpSession aSession, HttpServletRequest aRequest) {
+ String requestLanguage = aRequest.getParameter("language");
+ String sessionLanguage = (String) aSession.getAttribute("language");
+ String acceptLanguage = aRequest.getLocale().getLanguage();
+ String defaultLanguage = configuration.getString("Mir.Login.DefaultLanguage", "en");
+
+ String language = requestLanguage;
+
+ if (language==null)
+ language = sessionLanguage;
+
+ if (language==null)
+ language = acceptLanguage;
+
+ if (language==null)
+ language = defaultLanguage;
+
+ aSession.setAttribute("language", language);
+
+ return new Locale(language, "");
+ }
+
+ /**
+ * Dispatch method for open sessions: a flexible extensible and customizable way
+ * for open access. Can be used for postings, but also for lots of other stuff.
+ *
+ * @param aRequest
+ * @param aResponse
+ * @throws ServletModuleExc
+ * @throws ServletModuleUserExc
+ * @throws ServletModuleFailure
+ */
+ public void opensession(HttpServletRequest aRequest, HttpServletResponse aResponse)
+ throws ServletModuleExc, ServletModuleUserExc, ServletModuleFailure {
+
+ try {
+ Request request =
+ new HTTPAdapters.HTTPParsedRequestAdapter(new HTTPParsedRequest(aRequest,
+ configuration.getString("Mir.DefaultEncoding"),
+ configuration.getInt("MaxMediaUploadSize")*1024,
+ configuration.getString("TempDir")));
+
+ if (aRequest.isRequestedSessionIdValid() && !aRequest.isRequestedSessionIdFromURL() &&
+ !aRequest.getRequestedSessionId().equals(aRequest.getParameter(SESSION_REQUEST_KEY)))
+ aRequest.getSession().invalidate();
+
+ Session session = new HTTPAdapters.HTTPSessionAdapter(aRequest.getSession());
+
+ SimpleResponse response = new SimpleResponse(
+ ServletHelper.makeGenerationData(aRequest, aResponse, new Locale[] { getResponseLocale(aRequest.getSession(), aRequest), getFallbackLocale(aRequest)},
+ "etc/bundles/open"));
+
+ response.setResponseValue("actionURL", aResponse.encodeURL(MirGlobal.config().getString("RootUri") + "/servlet/OpenMir")+"?"+SESSION_REQUEST_KEY+"="+aRequest.getSession().getId());
+
+ SessionHandler handler = MirGlobal.localizer().openPostings().getOpenSessionHandler(request, session);
+
+ handler.processRequest(request, session, response);
+ ServletHelper.generateOpenPostingResponse(aResponse.getWriter(), response.getResponseValues(), response.getResponseGenerator());
+ }
+ catch (Throwable t) {
+ logger.error(t.toString());
+ t.printStackTrace(logger.asPrintWriter(LoggerWrapper.DEBUG_MESSAGE));