Ticket #394 (defect)

Config File:

[global]
;server.filtersRoot = ['filters']     ; SEMI-IMPORTANT LINE A
;server.inputFiltersDict = {'sessAuth': 'sessAuthFilter'}    ; SEMI-IMPORTANT LINE B

sessionFilter.on: True
;sessAuth.on = False

[/members]
;sessAuth.on = True

Some of my code:

class sessAuthFilter(BaseFilter):
  def beforeMain(self):
		
  if cherrypy.request.path.endswith('login'):
    print 'Login'
    return
  elif cherrypy.request.path.endswith('logout'):
    print 'Logout'
    return

class SomeClass():
  def index(self):
    return doStuff()

class MembersOnlyClass(SomeClass):
  _cpFilterList = [sessAuthFilter()]
  def login(self):
    return doLoginStuff()

cherrypy.root = SomeClass()
cherrypy.root.members = MembersOnlyClass()
cherrypy.config.update(file = 'site.ini')
cherrypy.server.start()

I intended to have the sessAuthFilter only operate in the /members 'directory'. With the code listed it works fine, but with the lines in the config file uncommented the Filter would run Once in the root, but twice in /members.

Another thing I noted, the sessionauthenticationfilter as provided by CherryPy-2.1 has a code snippet that will make it only run if its enabled. Shouldn't this be handled by the Filter Controller?

Personally I believe filters should be off by default, and require them to be explicitly turned on.

- xin@xlevus.net

p.s. Make this Ticket Box bigger.