Fix Redirection when not logged in

bcivel · bcivel · commit f7920262a452 · 2026-03-18T14:06:08.000+01:00
diff --git a/source/src/main/java/org/cerberus/core/config/cerberus/WebAppInitializer.java b/source/src/main/java/org/cerberus/core/config/cerberus/WebAppInitializer.java
@@ -23,6 +23,8 @@
 import jakarta.servlet.*;
 import jakarta.servlet.http.HttpSessionEvent;
 import jakarta.servlet.http.HttpSessionListener;
+import org.apache.logging.log4j.LogManager;
+import org.apache.logging.log4j.Logger;
 import org.cerberus.core.config.webmvc.WebMvcConfiguration;
 import org.springframework.web.WebApplicationInitializer;
 import org.springframework.web.context.ContextLoaderListener;
@@ -38,9 +40,15 @@
  */
 public class WebAppInitializer implements WebApplicationInitializer {
 
+    private static final Logger LOG = LogManager.getLogger(WebAppInitializer.class);
+
     @Override
     public void onStartup(ServletContext servletContext) throws ServletException {
 
+        LOG.info("========================================");
+        LOG.info(">>> WebAppInitializer.onStartup() called");
+        LOG.info("========================================");
+        
         // Single shared Spring context for both root beans and MVC beans.
         // Avoids the classic root/servlet context split that causes issues with Spring Security.
         AnnotationConfigWebApplicationContext context = new AnnotationConfigWebApplicationContext();
diff --git a/source/src/main/webapp/Homepage.jsp b/source/src/main/webapp/Homepage.jsp
@@ -23,6 +23,14 @@
 <%@page import="org.springframework.context.ApplicationContext" %>
 <%@page import="org.cerberus.core.database.IDatabaseVersioningService" %>
 
+<%-- Forcer l'authentification : si non connecté, rediriger vers Homepage.jsp pour passer par Spring Security --%>
+<%
+    if (request.getUserPrincipal() == null) {
+        response.sendRedirect(request.getContextPath() + "/Homepage.jsp");
+        return;
+    }
+%>
+
 <%@page contentType="text/html" pageEncoding="UTF-8" %>
 <!DOCTYPE html>
 <html class="h-full">
