8

I have a Stateful Session Bean (SFSB) which acts as authentication module. In the SFSB I store the current user that is logged in. Moreover I have some facades (which are Stateless Session Beans (SLSB)) that handles the JPA/SQL stuff for my entities. In order to check the access permissions of the current user, I try to call the SFSB out of the SLSB. But the current user field is always "null" when called from SLSB. When calling the SFSB directly, the current user field is set correctly... For calling I use the @EJB annotation.

Any ideas what the problem might be? Is that somehow a context problem? Is it generally possible to call a SFSB from SLSB preserving it's state?

Many thanks in advance!

salocinx
  • 3,715
  • 8
  • 61
  • 110
  • Perhaps yo could try passing a reference to a SFSB to your SLSB... Never tried it, but it seems like it might work. – jahroy Jul 11 '12 at 17:49
  • yes that's exactly what I am trying to do by using dependency injection with the @EJB annotation. but this doesn't work... – salocinx Jul 12 '12 at 08:09
  • 1
    I wasn't referring to dependency injection. I meant passing the SFSB as a method parameter. Dependency injection doesn't make sense in this scenario. Remember SLSBs just sit around in a pool waiting to service requests. They have no state at all and have no idea who is invoking them. They just execute tasks. – jahroy Jul 12 '12 at 16:44

3 Answers3

9

You shouldn't call a stateful session bean from a stateless session bean.

Here is some reading: JEE6 Tutorial - Session Beans

Stateless beans don't know anything about your session. Any time you call it, it is stateless. Then it calls a stateful session bean. No surprise it doesn't have any context relating to the state of the client's session because it is called from stateless object.

I don't know if it will work, but you possibly could try to get the context by doing a JNDI lookup instead of DI using the @EJB notation. Something like this in the stateless ejb might work. You'll probably have to play with it and I can't guarantee anything. It should get the context of the client calling the stateless ejb. The client will need to have session context/scope or forget it. 

@Resource SessionContext sessionContext;

MyStatefulBean msb = (MyStatefulBean)sessionContext.lookup("ejb/MyStatefulBean");
msb.doSomething(fubar);

It is better to call the stateful session bean from a client that has a session scope or from another stateful ejb. Stateless and stateful have different reasons for being.

Bill Rosmus
  • 2,941
  • 7
  • 40
  • 61
  • thanks for your answer. but this doesn't work for me... the SFSB has still no session context. any other ideas? – salocinx Jul 12 '12 at 08:07
  • In order to use SessionContext just must have successfully authenticated againt a security realm before. – salocinx Oct 10 '14 at 10:03
5

You should not inject a stateful EJB into a stateless EJB. This can have very unpredicatable consequences, because lifecycle of a stateful EJB is started when injected and managed by owning bean. In the worst case, stateless EJB can be reused by application server for different users, which would then access the same stateful EJB. In your case, a user would be identified as a different user.

Most probably you want to associate a stateful EJB with current HTTP session, which is not done automatically as many people suppose. For more details read section named EJB 3 Is Not Contextual here: Contexts and Dependency Injection article

In order to associate a stateful EJB with the session, you need to inject stateful EJB into session scoped CDI bean, which can be injected freely into a stateless bean - actually only a stub is injected and session scoped bean (together with the stateful EJB) is created for every new session.

Maybe even better approach is to extract interface of the stateful bean, and use a CDI producer to create a session scoped implementation of the sateful bean. This way you can also handle the case, when a stateful EJB is automatically removed on an exception in the EJB. In such case, you may want to recreate the EJB within the same session.

OndroMih
  • 7,280
  • 1
  • 26
  • 44
0

If you inject the stateful session bean inside stateless bean by look-up also does not work because new instance will be created for stateful bean so it does not hold any values like logged user information and etc...

user1023877
  • 193
  • 2
  • 3
  • 13