Spring Webflow Reference
Spring Webflow Reference
Reference Documentation
Keith Donald, SpringSource
Erwin Vervaet, Ervacon
Jeremy Grelle, SpringSource
Scott Andrews, SpringSource
Rossen Stoyanchev, SpringSource
Version 2.0.1
Copies of this document may be made for your own use and for distribution to
others, provided that you do not charge any fee for such copies and further
provided that each copy contains this Copyright Notice, whether distributed in
print or electronically.
Published April 2008
please define productname in your docbook file!
Table of Contents
Preface ...................................................................................................................................vii
1. Introduction ..........................................................................................................................8
1.1. What this guide covers ...............................................................................................8
1.2. What Web Flow requires to run ...................................................................................8
1.3. Where to get support ..................................................................................................8
1.4. Where to follow development .....................................................................................8
1.5. How to obtain Web Flow artifacts from the SpringSource Bundle Repository ................8
Accessing Web Flow with Maven ..............................................................................9
Accessing Web Flow with Ivy ...................................................................................9
1.6. How to obtain Web Flow artifacts from Maven Central ..............................................10
2. Defining Flows ...................................................................................................................12
2.1. Introduction .............................................................................................................12
2.2. What is a flow? ........................................................................................................12
2.3. What is the makeup of a typical flow? .......................................................................13
2.4. How are flows authored? ..........................................................................................13
2.5. Essential language elements ......................................................................................14
flow .......................................................................................................................14
view-state ...............................................................................................................14
transition ................................................................................................................14
end-state ................................................................................................................14
Checkpoint: Essential language elements .................................................................15
2.6. Actions ....................................................................................................................15
evaluate .................................................................................................................16
Checkpoint: flow actions .........................................................................................16
2.7. Input/Output Mapping ..............................................................................................17
input ......................................................................................................................17
output ....................................................................................................................18
Checkpoint: input/output mapping ...........................................................................18
2.8. Variables .................................................................................................................19
var .........................................................................................................................19
2.9. Calling subflows ......................................................................................................20
subflow-state ..........................................................................................................20
Checkpoint: calling subflows ...................................................................................20
3. Expression Language (EL) ..................................................................................................22
3.1. Introduction .............................................................................................................22
3.2. Supported EL implementations .................................................................................22
Unified EL .............................................................................................................22
OGNL ...................................................................................................................22
3.3. EL portability ..........................................................................................................22
3.4. EL usage .................................................................................................................22
Guide
please define productname in your docbook file!
Guide
please define productname in your docbook file!
Preface
Many web applications require the same sequence of steps to execute in different contexts. Often these
sequences are merely components of a larger task the user is trying to accomplish. Such a reusable
sequence is called a flow.
Consider a typical shopping cart application. User registration, login, and cart checkout are all examples
of flows that can be invoked from several places in this type of application.
Spring Web Flow is the module of Spring for implementing flows. The Web Flow engine plugs into the
Spring Web MVC platform and provides declarative flow definition language. This reference guide
shows you how to use and extend Spring Web Flow.
1. Introduction
Report bugs and influence the Web Flow project roadmap using the Spring Issue Tracker
[http://jira.springframework.org].
Subscribe to the Spring Community Portal [http://www.springframework.org] for the latest Spring news
and announcements.
To access jars using Maven, add the following repositories to your Maven pom:
<repository>
<id>com.springsource.repository.bundles.release</id>
<name>SpringSource Enterprise Bundle Repository - SpringSource Releases</name>
<url>http://repository.springsource.com/maven/bundles/release</url>
</repository>
<repository>
<id>com.springsource.repository.bundles.external</id>
<name>SpringSource Enterprise Bundle Repository - External Releases</name>
<url>http://repository.springsource.com/maven/bundles/external</url>
</repository>
<dependency>
<groupId>org.springframework.webflow</groupId>
<artifactId>org.springframework.binding</artifactId>
<version>2.0.0.RELEASE</version>
</dependency>
<dependency>
<groupId>org.springframework.webflow</groupId>
<artifactId>org.springframework.js</artifactId>
<version>2.0.0.RELEASE</version>
</dependency>
<dependency>
<groupId>org.springframework.webflow</groupId>
<artifactId>org.springframework.webflow</artifactId>
<version>2.0.0.RELEASE</version>
</dependency>
<dependency>
<groupId>org.springframework.webflow</groupId>
<artifactId>org.springframework.faces</artifactId>
<version>2.0.0.RELEASE</version>
</dependency>
To access jars using Ivy, add the following repositories to your Ivy config:
<url name="com.springsource.repository.bundles.release">
<ivy pattern="http://repository.springsource.com/ivy/bundles/release/
[organisation]/[module]/[revision]/[artifact]-[revision].[ext]" />
<artifact pattern="http://repository.springsource.com/ivy/bundles/release/
[organisation]/[module]/[revision]/[artifact]-[revision].[ext]" />
</url>
<url name="com.springsource.repository.bundles.external">
<ivy pattern="http://repository.springsource.com/ivy/bundles/external/
[organisation]/[module]/[revision]/[artifact]-[revision].[ext]" />
<artifact pattern="http://repository.springsource.com/ivy/bundles/external/
[organisation]/[module]/[revision]/[artifact]-[revision].[ext]" />
</url>
To access Web Flow jars from Maven Central, declare the following dependencies in you pom:
<dependency>
<groupId>org.springframework.webflow</groupId>
<artifactId>org.springframework.binding</artifactId>
<version>2.0.0.RELEASE</version>
</dependency>
<dependency>
<groupId>org.springframework.webflow</groupId>
<artifactId>org.springframework.js</artifactId>
<version>2.0.0.RELEASE</version>
Guide
please define productname in your docbook file!
</dependency>
<dependency>
<groupId>org.springframework.webflow</groupId>
<artifactId>org.springframework.webflow</artifactId>
<version>2.0.0.RELEASE</version>
</dependency>
<dependency>
<groupId>org.springframework.webflow</groupId>
<artifactId>org.springframework.faces</artifactId>
<version>2.0.0.RELEASE</version>
</dependency>
2. Defining Flows
2.1. Introduction
This chapter begins the Users Section. It shows how to implement flows using the flow definition
language. By the end of this chapter, you should have a good understanding of language constructs and
capable of authoring a flow definition.
The example below shows the structure of the book hotel flow referenced in the previous diagram:
Flow diagram
flow
</flow>
All states of the flow are defined within this element. The first state defined becomes the flow's starting
point.
view-state
Use the view-state element to define a step of the flow that renders a view:
By convention, a view-state maps its id to a view template in the directory where the flow is located. For
example, the state above might render
/WEB-INF/hotels/booking/enterBookingDetails.xhtml if the flow itself was located in
the /WEB-INF/hotels/booking directory.
transition
Use the transition element to handle events that occur within a state:
<view-state id="enterBookingDetails">
<transition on="submit" to="reviewBooking" />
</view-state>
end-state
Guide
please define productname in your docbook file!
With the three elements view-state, transition, and end-state, you can quickly express your
view navigation logic. Teams often do this before adding flow behaviors so they can focus on developing
the user interface of the application with end users first. Below is a sample flow that implements its view
navigation logic using these elements:
<flow xmlns="http://www.springframework.org/schema/webflow"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/webflow
http://www.springframework.org/schema/webflow/spring-webflow-2.0.xsd">
<view-state id="enterBookingDetails">
<transition on="submit" to="reviewBooking" />
</view-state>
<view-state id="reviewBooking">
<transition on="confirm" to="bookingConfirmed" />
<transition on="revise" to="enterBookingDetails" />
<transition on="cancel" to="bookingCancelled" />
</view-state>
</flow>
2.6. Actions
Most flows need to express more than just view navigation logic. Typically they also need to invoke
business services of the application or other actions.
Within a flow, there are several points where you can execute actions. These points are:
• On flow start
• On state entry
• On view render
• On transition execution
• On state exit
• On flow end
Actions are defined using a concise expression language. Spring Web Flow uses the Unified EL by
default. The next few sections will cover the essential language elements for defining actions.
evaluate
The action element you will use the most often is the evaluate element. Use the evaluate element
to evaluate an expression at a point within your flow. With this single tag you can invoke methods on
Spring beans or any other flow variable. For example:
If the expression returns a value, that value can be saved in the flow's data model called flowScope:
If the expression returns a value that may need to be converted, specify the desired type using the
result-type attribute:
<flow xmlns="http://www.springframework.org/schema/webflow"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/webflow
http://www.springframework.org/schema/webflow/spring-webflow-2.0.xsd">
Guide
please define productname in your docbook file!
<on-start>
<evaluate expression="bookingService.createBooking(hotelId, currentUser.name)"
result="flowScope.booking" />
</on-start>
<view-state id="enterBookingDetails">
<transition on="submit" to="reviewBooking" />
</view-state>
<view-state id="reviewBooking">
<transition on="confirm" to="bookingConfirmed" />
<transition on="revise" to="enterBookingDetails" />
<transition on="cancel" to="bookingCancelled" />
</view-state>
</flow>
This flow now creates a Booking object in flow scope when it starts. The id of the hotel to book is
obtained from a flow input attribute.
input
Input values are saved in flow scope under the name of the attribute. For example, the input above would
be saved under the name hotelId.
If an input value does not match the declared type, a type conversion will be attempted.
Use the value attribute to specify an expression to assign the input value to:
If the expression's value type can be determined, that metadata will be used for type coersion if no type
attribute is specified.
Use the required attribute to enforce the input is not null or empty:
output
Use the output element to declare a flow output attribute. Output attributes are declared within
end-states that represent specific flow outcomes.
<end-state id="bookingConfirmed">
<output name="bookingId" />
</end-state>
Output values are obtained from flow scope under the name of the attribute. For example, the output
above would be assigned the value of the bookingId variable.
Guide
please define productname in your docbook file!
<flow xmlns="http://www.springframework.org/schema/webflow"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/webflow
http://www.springframework.org/schema/webflow/spring-webflow-2.0.xsd">;
<on-start>
<evaluate expression="bookingService.createBooking(hotelId, currentUser.name)"
result="flowScope.booking" />
</on-start>
<view-state id="enterBookingDetails">
<transition on="submit" to="reviewBooking" />
</view-state>
<view-state id="reviewBooking">
<transition on="confirm" to="bookingConfirmed" />
<transition on="revise" to="enterBookingDetails" />
<transition on="cancel" to="bookingCancelled" />
</view-state>
</flow>
The flow now accepts a hotelId input attribute and returns a bookingId output attribute when a new
booking is confirmed.
2.8. Variables
A flow may declare one or more instance variables. These variables are allocated when the flow starts.
Any @Autowired transient references the variable holds are also rewired when the flow resumes.
var
Make sure your variable's class implements java.io.Serializable, as the instance state is saved
between flow requests.
subflow-state
The above example calls the createGuest flow, then waits for it to return. When the flow returns with
a guestCreated outcome, the new guest is added to the booking's guest list.
Simply refer to a subflow output attribute by its name within a outcome transition:
In the above example, guest is the name of an output attribute returned by the guestCreated
outcome.
Guide
please define productname in your docbook file!
<flow xmlns="http://www.springframework.org/schema/webflow"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/webflow
http://www.springframework.org/schema/webflow/spring-webflow-2.0.xsd">
<on-start>
<evaluate expression="bookingService.createBooking(hotelId, currentUser.name)"
result="flowScope.booking" />
</on-start>
<view-state id="enterBookingDetails">
<transition on="submit" to="reviewBooking" />
</view-state>
<view-state id="reviewBooking">
<transition on="addGuest" to="addGuest" />
<transition on="confirm" to="bookingConfirmed" />
<transition on="revise" to="enterBookingDetails" />
<transition on="cancel" to="bookingCancelled" />
</view-state>
</flow>
The flow now calls a createGuest subflow to add a new guest to the guest list.
3.1. Introduction
Web Flow uses EL to access its data model and invoke actions. This chapter will familiarize you with the
EL syntax, and special EL variables you can reference from your flow definition.
Unified EL
Note
The el-api dependency is typically a provided by your web container. Tomcat 6 includes
it, for example.
OGNL
OGNL [http://www.ognl.org] is the other EL supported by Web Flow 2. OGNL is the EL most familiar to
Web Flow version 1.0 users. To use ognl, simply include ognl in your classpath instead of jboss-el.
Please refer to the OGNL language guide
[http://www.ognl.org/2.6.9/Documentation/html/LanguageGuide/index.html] for specifics on its EL
syntax.
3.3. EL portability
In general, you will find the Unified EL and OGNL have a very similar syntax. For basic variable
resolution, property access, and method invocation the syntax is identical. We recommend adhering to
Unified EL syntax whenever possible, and only relying on proprietary EL features when needed.
3.4. EL usage
EL is used for many things within a flow, including:
1. Accessing data provided by the client, such as flow input attributes and request parameters.
4. Resolving constructs such as state transition criteria, subflow ids, and view names.
Views rendered by flows typically access flow data structures using EL as well.
Expression types
The first, and most common type of expression, is the standard eval expression. Such expressions are
dynamically evaluated by the EL and should not be enclosed in delimiters like ${} or #{}. For example:
The expression above is a standard expression that invokes the nextPage method on the
searchCriteria variable when evaluated. Attempting to enclose this expression in special eval
delimiters like ${} or #{} will result in an IllegalArgumentException.
Note
We view use of special eval delimiters as redundant in this context, as the only acceptable
value for the expression attribute is a single eval expression string.
Template expressions
The second type of expression is a "template" expression. Such expressions allow a mixing of literal text
with one or more eval blocks. Each eval block is explictly delimited with the ${} delimiters. For
example:
The expression above is a template expression. The result of evaluation will be a string that concatenates
the literal text error- with the result of evaluating externalContext.locale. As you can see,
explicit delimiters are necessary here to demarcate eval blocks within the template.
See the Web Flow XML schema for a complete listing of the XML attributes that accept standard
expressions and template expressions.
flowScope
Use flowScope to assign a flow variable. Flow scope gets allocated when a flow starts and destroyed
when the flow ends.
viewScope
Use viewScope to assign a view variable. View scope gets allocated when a view-state enters and
destroyed when the state exits. View scope is only referenceable from within a view-state.
<on-render>
<evaluate expression="searchService.findHotels(searchCriteria)" result="viewScope.hotels"
result-type="dataModel" />
</on-render>
requestScope
Use requestScope to assign a request variable. Request scope gets allocated when a flow is called and
destroyed when the flow returns.
flashScope
Use flashScope to assign a flash variable. Flash scope gets allocated when a flow starts, cleared after
every view render, and destroyed when the flow ends.
Guide
please define productname in your docbook file!
conversationScope
Use conversationScope to assign a conversation variable. Conversation scope gets allocated when a
top-level flow starts and destroyed when the top-level flow ends. Conversation scope is shared by a
top-level flow and all of its subflows.
requestParameters
currentEvent
currentUser
messageContext
Use messageContext to access a context for retrieving and creating flow execution messages,
including error and success messages. See the MessageContext Javadocs for more information.
resourceBundle
flowRequestContext
flowExecutionContext
flowExecutionUrl
Use flowExecutionUrl to access the context-relative URI for the current flow execution view-state.
externalContext
Use externalContext to access the client environment, including user session attributes. See the
ExternalContext API JavaDocs for more information.
<evaluate expression="searchService.suggestHotels(externalContext.sessionMap.userProfile)"
result="viewScope.hotels" />
Guide
please define productname in your docbook file!
When simply accessing a variable in one of the scopes, referencing the scope is optional. For example:
If no scope is specified, like in the use of booking above, a scope searching algorithm will be
employed. The algorithm will look in request, flash, view, flow, and conversation scope for the variable.
If no such variable is found, an EvaluationException will be thrown.
4. Rendering views
4.1. Introduction
This chapter shows you how to use the view-state element to render views within a flow.
<view-state id="enterBookingDetails">
<transition on="submit" to="reviewBooking" />
</view-state>
By convention, a view-state maps its id to a view template in the directory where the flow is located. For
example, the state above might render
/WEB-INF/hotels/booking/enterBookingDetails.xhtml if the flow itself was located in
the /WEB-INF/hotels/booking directory.
Below is a sample directory structure showing views and other resources like message bundles co-located
with their flow definition:
Flow Packaging
The view id may be a relative path to view resource in the flow's working directory:
The view id may be a absolute path to a view resource in the webapp root directory:
With some view frameworks, such as Spring MVC's view framework, the view id may also be a logical
identifier resolved by the framework:
See the Spring MVC integration section for more information on how to integrate with the MVC
ViewResolver infrastructure.
Use the var tag to declare a view variable. Like a flow variable, any @Autowired references are
Use the on-render tag to assign a variable from an action result before the view renders:
<on-render>
<evaluate expression="bookingService.findHotels(searchCriteria)" result="viewScope.hotels" />
</on-render>
Objects in view scope are often manipulated over a series of requests from the same view. The following
example pages through a search results list. The list is updated in view scope before each render.
Asynchronous event handlers modify the current data page, then request re-rendering of the search results
fragment.
<view-state id="searchResults">
<on-render>
<evaluate expression="bookingService.findHotels(searchCriteria)" result="viewScope.hotels" />
</on-render>
<transition on="next">
<evaluate expression="searchCriteria.nextPage()" />
<render fragments="searchResultsFragment" />
</transition>
<transition on="previous">
<evaluate expression="searchCriteria.previousPage()" />
<render fragments="searchResultsFragment" />
</transition>
</view-state>
<on-render>
<evaluate expression="bookingService.findHotels(searchCriteria)" result="viewScope.hotels" />
</on-render>
Guide
please define productname in your docbook file!
The model may be in any accessible scope, such as flowScope or viewScope. Specifying a model
triggers the following behavior when a view event occurs:
1. View-to-model binding. On view postback, form values are bound to model object properties for you.
2. Model validation. After binding, if the model object requires validation, that validation logic will be
invoked.
For a flow event to be generated that can drive a view state transition, model binding must complete
successfully. If model binding fails, the view is re-rendered to allow the user to revise their edits.
Programmatic validation
The first way is to define a validate method on the model object class. To do this, create a public method
with the name validate${state}, where state is the id of your view-state. The method must
declare a MessageContext parameter for recording validation error messages. For example:
Implementing a Validator
The second way is to define a separate object, called a Validator, which validates your model object. To
do this, create a class that defines a public method with the name validate${state}, where state
is the id of your view-state. The method must declare a parameter to accept your model object, and a
MessageContext parameter for recording validation error messages. For example:
@Component
public class BookingValidator {
public void validateEnterBookingDetails(Booking booking, MessageContext context) {
if (booking.getCheckinDate().before(today())) {
context.addMessage(new MessageBuilder().error().source("checkinDate").defaultText(
"Check in date must be a future date").build());
} else if (!booking.getCheckinDate().before(checkoutDate)) {
context.addMessage(new MessageBuilder().error().source("checkoutDate").defaultText(
"Check out date must be later than check in date").build());
}
}
}
A Validator can also accept a Spring MVC Errors object, which is required for invoking existing
Spring Validators.
Guide
please define productname in your docbook file!
handlers":
<transition on="event">
<-- Handle event -->
</transition>
These event handlers do not change the state of the flow. They simply execute their actions and re-render
the current view or one or more fragments of the current view.
Rendering partials
Use the render element to request partial re-rendering of a view after handling an event:
<transition on="next">
<evaluate expression="searchCriteria.nextPage()" />
<render fragments="searchResultsFragment" />
</transition>
The fragments attribute should reference the ID(s) of the view element(s) you wish to re-render. Specify
multiple elements to re-render by separating them with a comma delimiter.
Such partial rendering is often used with events signaled by Ajax to update a specific zone of the view.
Use the flow's global-transitions element to create event handlers that apply across all views.
Global-transitions are often used to handle global menu links that are part of the layout.
<global-transitions>
<transition on="login" to="login">
<transition on="logout" to="logout">
</global-transitions>
#messages.properties
checkinDate=Check in date must be a future date
notHealthy={0} is bad for your health
reservationConfirmation=We have processed your reservation - thank you and enjoy your stay
From within a view or a flow, you may also access message resources using the resourceBundle EL
variable:
Guide
please define productname in your docbook file!
When using Web Flow with the Spring Javascript, no client side code is necessary for the popup to
display. Web Flow will send a response to the client requesting a redirect to the view from a popup, and
the client will honor the request.
Discarding history
Invalidating history
Set the history attribute to invalidate to prevent backtracking to a view as well all previously
displayed views:
5.1. Introduction
Most applications access data in some way. Many modify data shared by multiple users and therefore
require transactional data access properties. This chapter shows you how to use flows to manage data
access in a web application.
Apart from these three patterns, there is the pattern of fully encapsulating PersistenceContext
management within the service layer of your application. In that case, the web layer does not get involved
with persistence, instead it works entirely with detached objects that are passed to and returned by your
service layer. This chapter will focus on the flow-managed persistence patterns, exploring how and when
to use them.
xsi:schemaLocation="http://www.springframework.org/schema/webflow
http://www.springframework.org/schema/webflow/spring-webflow-2.0.xsd">
<persistence-context>
</flow>
Then configure the correct FlowExecutionListener to apply this pattern to your flow. If using
Hibernate, register the HibernateFlowExecutionListener. If using JPA, register the
JpaFlowExecutionListener.
<bean id="jpaFlowExecutionListener"
class="org.springframework.webflow.persistence.JpaFlowExecutionListener">
<constructor-arg ref="entityManagerFactory" />
<constructor-arg ref="transactionManager" />
</bean>
To trigger a commit at the end, annotate your end-state with the commit attribute:
That is it. When your flow starts, the listener will handle allocating a new EntityManager in
flowScope. Reference this EntityManager at anytime from within your flow by using the special
persistenceContext variable. In addition, any data access that occurs using a Spring managed data
access object will use this EntityManager automatically. Such data access operations should always
execute non transactionally or in read-only transactions to maintain isolation of intermediate edits.
An implementation of this flow-managed persistence pattern is not yet available in the Web Flow
distribution, and will be considered for future releases.
An implementation of this flow-managed persistence pattern is not yet available in the Web Flow
distribution, and will be considered for future releases.
Guide
please define productname in your docbook file!
6. Securing Flows
6.1. Introduction
Security is an important concept for any application. End users should not be able to access any portion of
a site simply by guessing the URL. Areas of a site that are sensitive must insure that only authorized
requested are processed. Spring Security is a proven security platform that can integrate with your
application at multiple levels. This section will focus on securing flow execution.
• Annotate the flow definition with the secured element to define the security rules
Each of these steps must be completed or else flow security rules will not be applied.
Three phases of flow execution can be secured: flows, states and transitions. In each case the syntax for
the secured element is identical.
Security attributes
The attributes attribute is a comma separated list of Spring Security authorization attributes. Often,
these are specific security roles. The attributes are compared against the user's granted attributes by a
Spring Security access decision manager.
By default, a role based access decision manager is used to determine if the user is allowed access. This
will need to be overridden if your application is not using authorization roles.
Matching type
There are two types of matching available: any and all. Any, allows access if at least one of the
required security attributes is granted to the user. All, allows access only if each of the required security
attributes are granted to the user.
The match attribute will only be respected if the default access decision manager is used.
<bean id="securityFlowExecutionListener"
class="org.springframework.webflow.security.SecurityFlowExecutionListener" />
If your application is using authorities that are not role based, you will need to configure a custom
AccessDecisionManager. You can override the default decision manager by setting the
accessDecisionManager property on the security listener. Please consult the Spring Security
reference documentation [http://static.springframework.org/spring-security/site/reference.html] to learn
more about decision managers.
<bean id="securityFlowExecutionListener"
class="org.springframework.webflow.security.SecurityFlowExecutionListener">
<property name="accessDecisionManager" ref="myCustomAccessDecisionManager" />
</bean>
Both the booking-faces and booking-mvc sample applications are configured to use Spring
Security. Configuration is needed at both the Spring and web.xml levels.
Spring configuration
The Spring configuration defines http specifics (such as protected URLs and login/logout mechanics)
and the authentication-provider. For the sample applications, a local authentication provider is
configured.
<security:http auto-config="true">
<security:intercept-url pattern="/spring/login*" access="ROLE_ANONYMOUS" />
<security:intercept-url pattern="/spring/logout-success*" access="ROLE_ANONYMOUS" />
<security:intercept-url pattern="/spring/logout*" access="ROLE_USER" />
<security:form-login login-page="/spring/login"
login-processing-url="/spring/loginProcess"
default-target-url="/spring/main"
authentication-failure-url="/spring/login?login_error=1" />
<security:authentication-provider>
<security:password-encoder hash="md5" />
<security:user-service>
<security:user name="keith" password="417c7382b16c395bc25b5da1398cf076"
authorities="ROLE_USER,ROLE_SUPERVISOR" />
<security:user name="erwin" password="12430911a8af075c6f41c6976af22b09"
authorities="ROLE_USER,ROLE_SUPERVISOR" />
<security:user name="jeremy" password="57c6cbff0d421449be820763f03139eb"
authorities="ROLE_USER" />
<security:user name="scott" password="942f2339bf50796de535a384f0d1af3e"
authorities="ROLE_USER" />
</security:user-service>
</security:authentication-provider>
web.xml Configuration
In the web.xml file, a filter is defined to intercept all requests. This filter will listen for login/logout
Guide
please define productname in your docbook file!
requests and process them accordingly. It will also catch AccesDeniedExceptions and redirect the
user to the login page.
<filter>
<filter-name>springSecurityFilterChain</filter-name>
<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
</filter>
<filter-mapping>
<filter-name>springSecurityFilterChain</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
7. Flow Inheritance
7.1. Introduction
Flow inheritance allows one flow to inherit the configuration of another flow. Inheritance can occur at
both the flow and state levels. A common use case is for a parent flow to define global transitions and
exception handlers, then each child flow can inherit those settings.
In order for a parent flow to be found, it must be added to the flow-registry just like any other flow.
A child flow cannot override an element from a parent flow. Similar elements between the parent and
child flows will be merged. Unique elements in the parent flow will be added to the child.
A child flow can inherit from multiple parent flows. Java inheritance is limited to a single class.
Flow level inheritance is defined by the parent attribute on the flow element. The attribute contains a
comma separated list of flow identifiers to inherit from. The child flow will inherit from each parent in
the order it is listed adding elements and content to the resulting flow. The resulting flow from the first
merge will be considered the child in the second merge, and so on.
State level inheritance is similar to flow level inheritance, except only one state inherits from the parent,
instead of the entire flow.
Unlike flow inheritance, only a single parent is allowed. Additionally, the identifier of the flow state to
inherit from must also be defined. The identifiers for the flow and the state within that flow are separated
by a #.
The parent and child states must be of the same type. For instance a view-state cannot inherit from an
end-state, only another view-state.
<flow abstract="true">
There are two types of elements mergeable and non-mergeable. Mergeable elements will always attempt
to merge together if the elements are similar. Non-mergeable elements in a parent or child flow will
always be contained in the resulting flow intact. They will not be modified as part of the merge process.
Note
Paths to external resources in the parent flow should be absolute. Relative paths will break
when the two flows are merged unless the parent and child flow are in the same directory.
Once merged, all relative paths in the parent flow will become relative to the child flow.
Mergeable Elements
If the elements are of the same type and the keyed attribute are identical, the content of the parent element
will be merged with the child element. The merge algorithm will continue to merge each sub-element of
the merging parent and child. Otherwise the parent element is added as a new element to the child.
In most cases, elements from a parent flow that are added will be added after elements in the child flow.
Exceptions to this rule include actions elements (evaluate, render and set) which will be added at the
beginning. This allows for the results of parent actions to be used by child actions.
• action-state: id
• attribute: name
• decision-state: id
• end-state: id
• if: test
• input: name
• output: name
• secured: attributes
• subflow-state: id
• transition: on
• view-state: id
Non-mergeable Elements
• bean-import
• evaluate
• exception-handler
Guide
please define productname in your docbook file!
• persistence-context
• render
• set
• var
8. System Setup
8.1. Introduction
This chapter shows you how to setup the Web Flow system for use in any web environment.
8.2. webflow-config.xsd
Web Flow provides a Spring schema that allows you to configure the system. To use this schema, include
it in one of your infrastructure-layer beans files:
<beans xmlns="http://www.springframework.org/schema/beans"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:webflow="http://www.springframework.org/schema/webflow-config"
xsi:schemaLocation="
http://www.springframework.org/schema/beans
http://www.springframework.org/schema/beans/spring-beans-2.5.xsd
http://www.springframework.org/schema/webflow-config
http://www.springframework.org/schema/webflow-config/spring-webflow-config-2.0.xsd">
</beans>
FlowRegistry
<webflow:flow-registry id="flowRegistry">
<webflow:flow-location path="/WEB-INF/flows/booking/booking.xml" />
</webflow:flow-registry>
FlowExecutor
See the Spring MVC and Spring Faces sections of this guide on how to integrate the Web Flow system
with the MVC and JSF environment, respectively.
Use the flow-builder-services attribute to customize the services used to build the flows in a
registry. If no flow-builder-services tag is specified, the default service implementations are used. When
the tag is defined, you only need to reference the services you want to customize.
<webflow:flow-builder-services id="flowBuilderServices"
conversion-service="conversionService"
formatter-registry="formatterRegistry"
expression-parser="expressionParser"
view-factory-creator="viewFactoryCreator" />
conversion-service
Use the conversion-service attribute to customize the ConversionService used by the Web
Flow system. Converters are used to convert from one type to another when required during flow
execution. The default ConversionService registers converters for your basic object types such as
numbers, classes, and enums.
formatter-registry
Use the formatter-registry attribute to customize the FormatterRegistry used by the Web
Flow system. Formatters are used by Views to format model property values for display. The default
FormatterRegistry registers converters for your basic model object types such as numbers and dates.
expression-parser
Use the expression-parser attribute to customize the ExpressionParser used by the Web
Flow system. The default ExpressionParser uses the Unified EL if available on the classpath, otherwise
OGNL is used.
view-factory-creator
Use the parent attribute to link two flow registries together in a hierarchy. When the child registry is
queried, if it cannot find the requested flow it will delegate to its parent.
Use the location element to specify paths to flow definitions to register. By default, flows will be
assigned registry identifiers equal to their filenames minus the file extension.
Guide
please define productname in your docbook file!
<webflow:flow-location path="/WEB-INF/flows/booking/booking.xml">
<flow-definition-attributes>
<attribute name="caption" value="Books a hotel" />
<attribute name="persistence-context" value="true" type="boolean" />
</flow-definition-attributes>
</webflow:flow-location>
Use the flow-location-patterns element to register flows that match a specific resource location
pattern:
Use the flow-execution-listeners element to register listeners that observe the lifecycle of flow
executions:
<flow-execution-listeners>
<listener ref="securityListener"/>
<listener ref="persistenceListener"/>
</flow-execution-listeners>
max-executions
Tune the max-executions attribute to place a cap on the number of flow executions that can be
created per user session.
max-snapshots
Tune the max-execution-snapshots attribute to place a cap on the number of history snapshots
that can be taken per flow execution.
Guide
please define productname in your docbook file!
9.1. Introduction
This chapter shows how to integrate Web Flow into a Spring MVC web application. The booking-mvc
sample application is a good reference for Spring MVC with Web Flow. This application is a simplified
travel site that allows users to search for and book hotel rooms.
The example below maps all requests that begin with /spring/ to the DispatcherServlet. An
init-param is used to provide the contextConfigLocation. This is configuration file for the
web application.
<servlet>
<servlet-name>Spring MVC Dispatcher Servlet</servlet-name>
<servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
<init-param>
<param-name>contextConfigLocation</param-name>
<param-value>/WEB-INF/web-application-config.xml</param-value>
</init-param>
</servlet>
<servlet-mapping>
<servlet-name>Spring MVC Dispatcher Servlet</servlet-name>
<url-pattern>/spring/*</url-pattern>
</servlet-mapping>
The example above maps the servlet-relative request URL /hotels/booking to the
bookingFlowHandler.
• Override handleExecutionOutcome when you need to handle specific flow execution outcomes
in a custom manner. The default behavior sends a redirect to the ended flow's URL to restart a new
execution of the flow.
• Override handleException when you need fine-grained control over unhandled flow exceptions.
The default behavior attempts to restart the flow when a client attempts to access an ended or expired
flow execution. Any other exception is rethrown to the Spring MVC ExceptionResolver infrastructure
by default.
Example FlowHandler
A common interaction pattern between Spring MVC And Web Flow is for a Flow to redirect to a
Controller when it ends. FlowHandlers allow this to be done without coupling the flow definition with a
specific controller URL. An example FlowHandler that redirects to a Spring MVC Controller is shown
below:
Since this handler only needs to handle flow execution outcomes in a custom manner, nothing else is
overridden. The bookingConfirmed outcome will result in a redirect to show the new booking. Any
other outcome will redirect back to the hotels index page.
To use your FlowHandler, first deploy an instance to Spring so it can be mapped to a URL:
<property name="mappings">
<value>
/hotels/booking=bookingFlowHandler
</value>
</property>
With this configuration, accessing the URL /hotels/booking will launch the booking flow. When
the booking flow ends, the FlowHandler will process the flow execution outcome and redirect to the
appropriate controller.
Guide
please define productname in your docbook file!
To enable flow handlers, make sure you define the special FlowHandlerAdapter. You only need to
do this once.
FlowHandler Redirects
By default, returned resource locations are relative to the current servlet mapping. This allows for a flow
handler to redirect to other Controllers in the application using relative paths. In addition, explicit redirect
prefixes are supported for cases where more control is needed.
• contextRelative: - redirect to a resource relative to the current web application context path
These same redirect prefixes are also supported within a flow definition when using the
externalRedirect: directive in conjunction with a view-state or end-state; for example,
view="externalRedirect:http://springframework.org"
For simple cases, consider using the FlowController to map flow requests to a single handler. You
only have to configure this controller once and it will apply the flow handling defaults outlined in the
previous section. Also, you can still override these defaults by configuring the controller's
flowHandlers property.
With this configuration, accessing /login launches the login flow. Accessing /hotels/booking
launches the booking flow.
Guide
please define productname in your docbook file!
10.1. Introduction
Spring Javascript (spring-js) is a lightweight abstraction over common JavaScript toolkits such as Dojo. It
aims to provide a common client-side programming model for progressively enhancing a web page with
rich widget behavior and Ajax remoting.
Use of the Spring JS API is demonstrated in the the Spring MVC + Web Flow version of the Spring
Travel reference application. In addition, the JSF components provided as part of the Spring Faces library
build on Spring.js.
<!-- Serves static resource content from .jar files such as spring-js.jar -->
<servlet>
<servlet-name>Resource Servlet</servlet-name>
<servlet-class>org.springframework.js.resource.ResourceServlet</servlet-class>
</servlet>
<!-- Map all /resources requests to the Resource Servlet for handling -->
<servlet-mapping>
<servlet-name>Resources Servlet</servlet-name>
<url-pattern>/resources/*</url-pattern>
</servlet-mapping>
Using Spring Javascript in a page requires including the underlying toolkit as normal, the Spring.js
base interface file, and the Spring-(library implementation).js file for the underlying
toolkit. As an example, the following includes obtain the Dojo implementation of Spring.js using the
ResourceServlet:
When using the widget system of an underlying library, typically you must also include some CSS
resources to obtain the desired look and feel. For the booking-mvc reference application, Dojo's
tundra.css is included:
The following example illustrates enhancing a Spring MVC <form:input> tag with rich suggestion
behavior:
The ElementDecoration is used to apply rich widget behavior to an existing DOM node. This
decoration type does not aim to completely hide the underlying toolkit, so the toolkit's native widget type
and attributes are used directly. This approach allows you to use a common decoration model to integrate
any widget from the underlying toolkit in a consistent manner. See the booking-mvc reference
application for more examples of applying decorations to do things from suggestions to client-side
validation.
When using the ElementDecoration to apply widgets that have rich validation behavior, a common
need is to prevent the form from being submitted to the server until validation passes. This can be done
with the ValidateAllDecoration:
This decorates the "Proceed" button with a special onclick event handler that fires the client side
validators and does not allow the form to submit until they pass successfully.
An AjaxEventDecoration applies a client-side event listener that fires a remote Ajax request to the
server. It also auto-registers a callback function to link in the response:
This decorates the onclick event of the "Previous Results" link with an Ajax call, passing along a special
parameter that specifies the fragment to be re-rendered in the response. Note that this link would still be
fully functional if Javascript was unavailable in the client. (See the section on Handling Ajax Requests for
details on how this request is handled on the server.)
Sometimes it is necessary to call Spring Javascript's RemotingHandler directly instead of using the
AjaxEventDecoration. For example, see inline onclick handler of this button:
In order to be able to render partial fragments of a full response, the full response must be built using a
templating technology that allows the use of composition for constructing the response, and for the
member parts of the composition to be referenced and rendered individually. Spring Javascript provides
some simple Spring MVC extensions that make use of Tiles to achieve this. The same technique could
theoretically be used with any templating system supporting composition.
Spring Javascript's Ajax remoting functionality is built upon the notion that the core handling code for an
Ajax request should not differ from a standard browser request, thus no special knowledge of an Ajax
request is needed directly in the code and the same hanlder can be used for both styles of request.
Guide
please define productname in your docbook file!
In order to handle Ajax requests with Spring MVC controllers, all that is needed is the configuration of
the provided Spring MVC extensions in your Spring application context for rendering the partial response
(note that these extensions require the use of Tiles for templating):
This configures the AjaxUrlBasedViewResolver which in turn interprets Ajax requests and creates
FlowAjaxTilesView objects to handle rendering of the appropriate fragments. Note that
FlowAjaxTilesView is capable of handling the rendering for both Web Flow and pure Spring MVC
requests. The fragments correspond to individual attributes of a Tiles view definition. For example, take
the following Tiles view definition:
Spring Web Flow handles the optional rendering of fragments directly in the flow definition language
through use of the render element. The benefit of this approach is that the selection of fragments is
completely decoupled from client-side code, such that no special parameters need to be passed with the
request the way they currently must be with the pure Spring MVC controller approach. For example, if
you wanted to render the "hotelSearchForm" fragment from the previous example Tiles view into a rich
Javascript popup:
11.1. Introduction
Spring Faces is Spring's JSF integration module that simplifies using JSF with Spring. It lets you use the
JSF UI Component Model with Spring MVC and Spring Web Flow controllers.
Spring Faces also includes a small Facelets component library that provides Ajax and client-side
validation capabilities. This component library builds on Spring Javascript, a Javascript abstraction
framework that integrates Dojo as the underlying UI toolkit.
Spring Faces provides a powerful supplement to a number of the standard JSF facilities, including:
2. scope management
3. event handling
4. navigation rules
6. cleaner URLs
7. model-level validation
<servlet>
<servlet-name>Spring MVC Dispatcher Servlet</servlet-name>
<servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
<init-param>
<param-name>contextConfigLocation</param-name>
<param-value>/WEB-INF/web-application-config.xml</param-value>
</init-param>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet-mapping>
<servlet-name>Spring MVC Dispatcher Servlet</servlet-name>
<url-pattern>/spring/*</url-pattern>
</servlet-mapping>
In order for JSF to bootstrap correctly, the FacesServlet must be configured in web.xml as it
normally would even though you generally will not need to route requests through it at all when using
Spring Faces.
<!-- Just here so the JSF implementation can initialize, *not* used at runtime -->
<servlet>
<servlet-name>Faces Servlet</servlet-name>
<servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
<load-on-startup>1</load-on-startup>
</servlet>
When using the Spring Faces components, you also need to configure the Spring JavaScript
ResourceServlet so that CSS and JavaScript resources may be output correctly by the components.
This servlet must be mapped to /resources/* in order for the URL's rendered by the components to
function correctly.
<!-- Serves static resource content from .jar files such as spring-faces.jar -->
<servlet>
<servlet-name>Resource Servlet</servlet-name>
<servlet-class>org.springframework.js.resource.ResourceServlet</servlet-class>
<load-on-startup>0</load-on-startup>
</servlet>
<!-- Map all /resources requests to the Resource Servlet for handling -->
<servlet-mapping>
<servlet-name>Resources Servlet</servlet-name>
<url-pattern>/resources/*</url-pattern>
</servlet-mapping>
The Spring Faces components require the use of Facelets instead of JSP, so the typical Facelets
configuration must be added as well when using these components.
!-- Use JSF view templates saved as *.xhtml, for use with Facelets -->
<context-param>
<param-name>javax.faces.DEFAULT_SUFFIX</param-name>
<param-value>.xhtml</param-value>
</context-param>
<!-- Executes flows: the central entry point into the Spring Web Flow system -->
<webflow:flow-executor id="flowExecutor" />
</beans>
See the booking-faces reference application in the distribution for a complete working example.
Guide
please define productname in your docbook file!
<faces-config>
<application>
<!-- Enables Facelets -->
<view-handler>com.sun.facelets.FaceletViewHandler</view-handler>
</application>
</faces-config>
In doing pure JSF development, you will quickly find that request scope is not long-lived enough for
storing conversational model objects that drive complex event-driven views. The only available option is
to begin putting things into session scope, with the extra burden of needing to clean the objects up before
progressing to another view or functional area of the application. What is really needed is a managed
scope that is somewhere between request and session scope. Fortunately web flow provides such
extended facilities.
The easiest and most natural way to declare and manage the model is through the use of flow variables .
You can declare these variables at the beginning of the flow:
and then reference this variable in one of the flow's JSF view templates through EL:
Note that you do not need to prefix the variable with its scope when referencing it from the template
(though you can do so if you need to be more specific). As with standard JSF beans, all available scopes
will be searched for a matching variable, so you could change the scope of the variable in your flow
definition without having to modify the EL expressions that reference it.
You can also define view instance variables that are scoped to the current view and get cleaned up
automatically upon transitioning to another view. This is quite useful with JSF as views are often
constructed to handle multiple in-page events across many requests before transitioning to another view.
To define a view instance variable, you can use the var element inside a view-state definition:
<view-state id="enterSearchCriteria">
<var name="searchCriteria" class="com.mycompany.myapp.hotels.search.SearchCriteria"/>
</view-state>
Though defining autowired flow instance variables provides nice modularization and readability,
occasions may arise where you want to utilize the other capabilities of the Spring container such as AOP.
In these cases, you can define a bean in your Spring ApplicationContext and give it a specific web flow
scope:
The major difference with this approach is that the bean will not be fully initialized until it is first
accessed via an EL expression. This sort of lazy instantiation via EL is quite similar to how JSF managed
beans are typically allocated.
The need to initialize the model before view rendering (such as by loading persistent entities from a
database) is quite common, but JSF by itself does not provide any convenient hooks for such
initialization. The flow definition language provides a natural facility for this through its Actions . Spring
Faces provides some extra conveniences for converting the outcome of an action into a JSF-specific data
structure. For example:
<on-render>
<evaluate expression="bookingService.findBookings(currentUser.name)"
result="viewScope.bookings" result-type="dataModel" />
</on-render>
Guide
please define productname in your docbook file!
This will take the result of the bookingService.findBookings method an wrap it in a custom
JSF DataModel so that the list can be used in a standard JSF DataTable component:
The custom DataModel provides some extra conveniences such as being serializable for storage beyond
request scope and access to the currently selected row in EL expressions. For example, on postback from
a view where the action event was fired by a component within a DataTable, you can take action on the
selected row's model instance:
<transition on="cancelBooking">
<evaluate expression="bookingService.cancelBooking(bookings.selectedRow)" />
</transition>
A simple but common case in JSF is the need to signal an event that causes manipulation of the model in
some way and then redisplays the same view to reflect the changed state of the model. The flow definition
language has special support for this in the transition element.
A good example of this is a table of paged list results. Suppose you want to be able to load and display
only a portion of a large result list, and allow the user to page through the results. The initial
<view-state id="reviewHotels">
<on-render>
<evaluate expression="bookingService.findHotels(searchCriteria)"
result="viewScope.hotels" result-type="dataModel" />
</on-render>
</view-state>
You construct a JSF DataTable that displays the current hotels list, and then place a "More Results"
link below the table:
This commandLink signals a "next" event from its action attribute. You can then handle the event by
adding to the view-state definition:
<view-state id="reviewHotels">
<on-render>
<evaluate expression="bookingService.findHotels(searchCriteria)"
result="viewScope.hotels" result-type="dataModel" />
</on-render>
<transition on="next">
<evaluate expression="searchCriteria.nextPage()" />
</transition>
</view-state>
Here you handle the "next" event by incrementing the page count on the searchCriteria instance. The
on-render action is then called again with the updated criteria, which causes the next page of results to
be loaded into the DataModel. The same view is re-rendered since there was no to attribute on the
transition element, and the changes in the model are reflected in the view.
The next logical level beyond in-page events are events that require navigation to another view, with
some manipulation of the model along the way. Achieving this with pure JSF would require adding a
navigation rule to faces-config.xml and likely some intermediary Java code in a JSF managed bean (both
tasks requiring a re-deploy). With the flow defintion language, you can handle such a case concisely in
one place in a quite similar way to how in-page events are handled.
Continuing on with our use case of manipulating a paged list of results, suppose we want each row in the
displayed DataTable to contain a link to a detail page for that row instance. You can add a column to the
table containing the following commandLink component:
Guide
please define productname in your docbook file!
This raises the "select" event which you can then handle by adding another transition element to the
existing view-state :
<view-state id="reviewHotels">
<on-render>
<evaluate expression="bookingService.findHotels(searchCriteria)"
result="viewScope.hotels" result-type="dataModel" />
</on-render>
<transition on="next">
<evaluate expression="searchCriteria.nextPage()" />
</transition>
<transition on="select" to="reviewHotel">
<set name="flowScope.hotel" value="hotels.selectedRow" />
</transition>
</view-state>
Here the "select" event is handled by pushing the currently selected hotel instance from the DataTable
into flow scope, so that it may be referenced by the "reviewHotel" view-state .
JSF provides useful facilities for validating input at field-level before changes are applied to the model,
but when you need to then perform more complex validation at the model-level after the updates have
been applied, you are generally left with having to add more custom code to your JSF action methods in
the managed bean. Validation of this sort is something that is generally a responsibility of the domain
model itself, but it is difficult to get any error messages propagated back to the view without introducing
an undesirable dependency on the JSF API in your domain layer.
With Spring Faces, you can utilize the generic and low-level MessageContext in your business code
and any messages added there will then be available to the FacesContext at render time.
For example, suppose you have a view where the user enters the necessary details to complete a hotel
booking, and you need to ensure the Check In and Check Out dates adhere to a given set of business
rules. You can invoke such model-level validation from a transition element:
<view-state id="enterBookingDetails">
<transition on="proceed" to="reviewBooking">
<evaluate expression="booking.validateEnterBookingDetails(messageContext)" />
</transition>
</view-state>
Here the "proceed" event is handled by invoking a model-level validation method on the booking
instance, passing the generic MessageContext instance so that messages may be recorded. The
messages can then be displayed along with any other JSF messages with the h:messages component,
Spring Faces provides some special UICommand components that go beyond the standard JSF
components by adding the ability to do Ajax-based partial view updates. These components degrade
gracefully so that the flow will still be fully functional by falling back to full page refreshes if a user with
a less capable browser views the page.
Revisiting the earlier example with the paged table, you can change the "More Results" link to use an
Ajax request by replacing the standard commandButton with the Spring Faces version (note that the
Spring Faces command components use Ajax by default, but they can alternately be forced to use a
normal form submit by setting ajaxEnabled="false" on the component):
This event is handled just as in the non-Ajax case with the transition element, but now you will add
a special render action that specifies which portions of the component tree need to be re-rendered:
<view-state id="reviewHotels">
<on-render>
<evaluate expression="bookingService.findHotels(searchCriteria)"
result="viewScope.hotels" result-type="dataModel" />
</on-render>
<transition on="next">
<evaluate expression="searchCriteria.nextPage()" />
<render fragments="hotels:searchResultsFragment" />
</transition>
</view-state>
An additional built-in feature when using the Spring Faces Ajax components is the ability to have the
response rendered inside a rich modal popup widget by setting popup="true" on a view-state .
Guide
please define productname in your docbook file!
<on-entry>
<render fragments="hotelSearchFragment" />
</on-entry>
<transition on="search" to="reviewHotels">
<evaluate expression="searchCriteria.resetPage()"/>
</transition>
</view-state>
If the "changeSearchCriteria" view-state is reached as the result of an Ajax-request, the result will be
rendered into a rich popup. If JavaScript is unavailable, the request will be processed with a full browser
refresh, and the "changeSearchCriteria" view will be rendered as normal.
Simple client-side text validation can be applied with the clientTextValidator component:
<sf:clientTextValidator required="true">
<h:inputText id="creditCardName" value="#{booking.creditCardName}" required="true"/>
</sf:clientTextValidator>
This will apply client-side required validation to the child inputText component, giving the user a
clear indicator if the field is left blank.
Simple client-side numeric validation can be applied with the clientNumberValidator component:
This will apply client-side validation to the child inputText component, giving the user a clear
indicator if the field is left blank, is not numeric, or does not match the given regular expression.
Simple client-side date validation with a rich calendar popup can be applied with the
clientDateValidator component:
This will apply client-side validation to the child inputText component, giving the user a clear
indicator if the field is left blank or is not a valid date.
The validateAllOnClick component can be used to intercept the "onclick" event of a child
component and suppress the event if all client-side validations do not pass.
<sf:validateAllOnClick>
<sf:commandButton id="proceed" action="proceed" processIds="*" value="Proceed"/> 
</sf:validateAllOnClick>
This will prevent the form from being submitted when the user clicks the "proceed" button if the form is
invalid. When the validations are executed, the user is given clear and immediate indicators of the
problems that need to be corrected.
Guide
please define productname in your docbook file!
To use the Rich Faces component library with Spring Faces, the following filter configuration is needed
in web.xml (in addition to the typical Spring Faces configuration):
<filter>
<display-name>RichFaces Filter</display-name>
<filter-name>richfaces</filter-name>
<filter-class>org.ajax4jsf.Filter</filter-class>
</filter>
<filter-mapping>
<filter-name>richfaces</filter-name>
<servlet-name>Spring Web MVC Dispatcher Servlet</servlet-name>
<dispatcher>REQUEST</dispatcher>
<dispatcher>FORWARD</dispatcher>
<dispatcher>INCLUDE</dispatcher>
</filter-mapping>
For deeper integration (including the ability to have a view with combined use of the Spring Faces Ajax
components and Rich Faces Ajax components), configure the RichFacesAjaxHandler on your
FlowController:
RichFaces Ajax components can be used in conjunction with the render tag to render partial fragments
on an Ajax request. Instead of embedding the ids of the components to be re-rendered directly in the view
template (as you traditionally do with Rich Faces), you can bind the reRender attribute of a RichFaces
Ajax component to a special flowRenderFragments EL variable. For example, in your view
template you can have a fragment that you would potentially like to re-render in response to a particular
event:
<h:form id="hotels">
<a4j:outputPanel id="searchResultsFragment">
<h:outputText id="noHotelsText" value="No Hotels Found" rendered="#{hotels.rowCount == 0}"/>
<h:dataTable id="hotels" styleClass="summary" value="#{hotels}" var="hotel" rendered="#{hotels.rowCount
<h:column>
<f:facet name="header">Name</f:facet>
#{hotel.name}
</h:column>
<h:column>
<f:facet name="header">Address</f:facet>
#{hotel.address}
</h:column>
</h:dataTable>
</a4j:outputPanel>
</h:form>
<transition on="next">
<evaluate expression="searchCriteria.nextPage()" />
<render fragments="hotels:searchResultsFragment" />
</transition>
The Apache MyFaces Trinidad library has been tested with the Spring Faces integration and proven to fit
in nicely. Deeper integration to allow the Trinidad components and Spring Faces components to play well
together has not yet been attempted, but Trinidad provides a pretty thorough solution on its own when
used in conjunction with the Spring Faces integration layer.
Typical Trinidad + Spring Faces configuration is as follows in web.xml (in addition to the typical Spring
Faces configuration):
<context-param>
<param-name>javax.faces.STATE_SAVING_METHOD</param-name>
<param-value>server</param-value>
</context-param>
<context-param>
<param-name>
org.apache.myfaces.trinidad.CHANGE_PERSISTENCE
</param-name>
<param-value>session</param-value>
</context-param>
<context-param>
<param-name>
org.apache.myfaces.trinidad.ENABLE_QUIRKS_MODE
</param-name>
<param-value>false</param-value>
</context-param>
<filter>
<filter-name>Trinidad Filter</filter-name>
<filter-class>
org.apache.myfaces.trinidad.webapp.TrinidadFilter
</filter-class>
</filter>
<filter-mapping>
<filter-name>Trinidad Filter</filter-name>
Guide
please define productname in your docbook file!
<servlet>
<servlet-name>Trinidad Resource Servlet</servlet-name>
<servlet-class>
org.apache.myfaces.trinidad.webapp.ResourceServlet
</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>resources</servlet-name>
<url-pattern>/adf/*</url-pattern>
</servlet-mapping>
12.1. Introduction
This chapter shows how to use Web Flow in a Portlet environment. Web Flow has full support for
JSR-168 portlets. The booking-portlet-mvc sample application is a good reference for using Web
Flow within a portlet. This application is a simplified travel site that allows users to search for and book
hotel rooms.
In general, the configuration requires adding a servlet mapping in the web.xml file to dispatch request to
the portlet container.
<servlet>
<servlet-name>swf-booking-mvc</servlet-name>
<servlet-class>org.apache.pluto.core.PortletServlet</servlet-class>
<init-param>
<param-name>portlet-name</param-name>
<param-value>swf-booking-mvc</param-value>
</init-param>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet-mapping>
<servlet-name>swf-booking-mvc</servlet-name>
<url-pattern>/PlutoInvoker/swf-booking-mvc</url-pattern>
</servlet-mapping>
<portlet>
...
<portlet-class>org.springframework.web.portlet.DispatcherPortlet</portlet-class>
<init-param>
<name>contextConfigLocation</name>
<value>/WEB-INF/web-application-config.xml</value>
</init-param>
<init-param>
<name>viewRendererUrl</name>
<value>/WEB-INF/servlet/view</value>
</init-param>
<expiration-cache>0</expiration-cache>
...
</portlet>
Flow Handlers
The only supported mechanism for bridging a portlet request to Web Flow is a FlowHandler. The
PortletFlowController used in Web Flow 1.0 is no longer supported.
The flow handler, similar to the servlet flow handler, provides hooks that can:
• handle exceptions
In a portlet environment the targeted flow id can not be inferred from the URL and must be defined
explicitly in the handler.
Handler Mappings
Spring Portlet MVC provides a rich set of methods to map portlet requests. Complete documentation is
available in the Spring Reference Documentation
[http://static.springframework.org/spring/docs/2.5.x/reference/portlet.html#portlet-handlermapping].
<bean id="portletModeHandlerMapping"
class="org.springframework.web.portlet.handler.PortletModeHandlerMapping">
<property name="portletModeMap">
<map>
<entry key="view">
<bean class="org.springframework.webflow.samples.booking.ViewFlowHandler" />
</entry>
</map>
</property>
</bean>
A FlowHandlerAdapter converts the handler mappings to the flow handlers. The flow executor is
required as a constructor argument.
<bean id="flowHandlerAdapter"
class="org.springframework.webflow.mvc.portlet.FlowHandlerAdapter">
<constructor-arg ref="flowExecutor" />
</bean>
<servlet>
<servlet-name>ViewRendererServlet</servlet-name>
<servlet-class>org.springframework.web.servlet.ViewRendererServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>ViewRendererServlet</servlet-name>
<url-pattern>/WEB-INF/servlet/view</url-pattern>
</servlet-mapping>
Window State
The Portlet API defined three window states: normal, minimized and maximized. The portlet
implementation must decide what to render for each of these window states. Web Flow exposes the string
Guide
please define productname in your docbook file!
value of the window state under portletWindowState via the request map on the external context.
requestContext.getExternalContext().getRequestMap().get("portletWindowState");
externalContext.requestMap.portletWindowState
Portlet Mode
The Portlet API defined three portlet modes: view, edit and help. The portlet implementation must decide
what to render for each of these modes. Web Flow exposes the string value of the portlet mode under
portletMode via the request map on the external context.
requestContext.getExternalContext().getRequestMap().get("portletMode");
externalContext.requestMap.portletMode
Redirects
The Portlet API only allows redirects to be requested from an action request. Because views are rendered
on the render request, views and view-states cannot trigger a redirect.
The portlet container passes the execution key from the previous flow when switching to a new mode.
Even if the mode is mapped to a different FlowHandler the flow execution will resume the previous
execution. You may switch the mode programatically in your FlowHandler after ending a flow in an
ActionRequest.
One way to start a new flow is to create a URL targeting the mode without the execution key.
Web Flow supports JSF as the view technology for a portlet. However, a jsf-portlet bridge (JSR-301)
must be provided. At the time of this writing, no feature complete jsf-portlet bridge exists. Some of the
existing bridge implementations may appear to work, however, side effect may occur.
Guide
please define productname in your docbook file!
13.1. Introduction
This chapter shows you how to test flows.
@Override
protected FlowDefinitionResource getResource(FlowDefinitionResourceFactory resourceFactory) {
return resourceFactory.createFileResource("src/main/webapp/WEB-INF/flows/booking/booking.xml");
}
@Override
protected void configureFlowBuilderContext(MockFlowBuilderContext builderContext) {
builderContext.registerBean("bookingService", new StubBookingService());
}
assertCurrentStateEquals("enterBookingDetails");
assertTrue(getRequiredFlowAttribute("booking") instanceof Booking);
}
Assertions generally verify the flow is in the correct state you expect.
setCurrentState("enterBookingDetails");
getFlowScope().put("booking", createTestBooking());
assertCurrentStateEquals("reviewBooking");
}
setCurrentState("reviewHotel");
getFlowDefinitionRegistry().registerFlowDefinition(createMockBookingSubflow());
Guide
please define productname in your docbook file!
14.1. Introduction
This chapter shows you how to upgrade existing Web Flow 1 application to Web Flow 2.
An automated tool is available to aid in the conversion of existing 1.x flows to the new 2.x style. The tool
will convert all the old tag names to their new equivalents, if needed. While the tool will make a best
effort attempt at conversion, there is not a one-to-one mapping for all version 1 concepts. If the tool was
unable to convert a portion of the flow, it will be marked with a WARNING comment in the resulting flow.
The conversion tool requires spring-webflow.jar, spring-core.jar and an XSLT 1.0 engine. Saxon 6.5.5
[http://saxon.sourceforge.net/] is recommended.
The tool can be run from the command line with the following command. Required libraries must be
available on the classpath. The source must be a single flow to convert. The resulting converted flow will
be sent to standard output.
EL Expressions
EL expressions are used heavily throughout the flow definition language. Many of the attributes that
appear to be plain text are actually interpreted as EL. The standard EL delimiters (either ${} or #{}) are
not necessary and will often cause an exception if they are included.
The FactoryBean bean XML configuration method used in Web Flow 1 is no longer supported. The
schema configuration method should be used instead. In particular beans defining
FlowExecutorFactoryBean and XmlFlowRegistryFactoryBean should be updated.
Continue reading Web Flow Schema Configuration for details.
The webflow-config configuration schema has also changed slightly from version 1 to 2. The
simplest way to update your application is modify the version of the schema to 2.0 then fix any errors in a
schema aware XML editor. The most common change is add 'flow-' to the beginning of the elements
defined by the schema.
<beans xmlns="http://www.springframework.org/schema/beans"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:webflow="http://www.springframework.org/schema/webflow-config"
xsi:schemaLocation="
http://www.springframework.org/schema/beans
http://www.springframework.org/schema/beans/spring-beans-2.5.xsd
http://www.springframework.org/schema/webflow-config
http://www.springframework.org/schema/webflow-config/spring-webflow-config-2.0.xsd">
flow-executor
The flow executor is the core Web Flow configuration element. This element replaces previous
FlowExecutorFactoryBean bean definitions.
flow-execution-listeners
Flow execution listeners are also defined in the flow executor. Listeners are defined using standard bean
definitions and added by reference.
<bean id="securityFlowExecutionListener"
class="org.springframework.webflow.security.SecurityFlowExecutionListener" />
flow-registry
The flow-registry contains a set of flow-locations. Every flow definition used by Web Flow
must be added to the registry. This element replaces previous XmlFlowRegistryFactoryBean bean
definitions.
<webflow:flow-registry id="flowRegistry">
<webflow:flow-location path="/WEB-INF/hotels/booking/booking.xml" />
</webflow:flow-registry>
Flow Controller
Guide
please define productname in your docbook file!
The default URL handler has changed in Web Flow 2. The flow identifier is now derived from the URL
rather then passed explicitly. In order to maintain comparability with existing views and URL structures a
WebFlow1FlowUrlHandler is available.
View Resolution
Web Flow 2 by default will both select and render views. View were previously selected by Web Flow 1
and then rendered by an external view resolver.
In order for version 1 flows to work in Web Flow 2 the default view resolver must be overridden. A
common use case is to use Apache Tiles [http://tiles.apache.org/] for view resolution. The following
configuration will replace the default view resolver with a Tiles view resolver. The
tilesViewResolver in this example can be replaced with any other view resolver.
<webflow:flow-builder-services id="flowBuilderServices"
view-factory-creator="mvcViewFactoryCreator"/>
<bean class="org.springframework.web.servlet.view.tiles.TilesConfigurer">
<property name="definitions" value="/WEB-INF/tiles-def.xml" />
</bean>
Web Flow 1 required Spring MVC based flows to manually call FormAction methods, notably:
setupForm, bindAndValidate to process form views. Web Flow 2 now provides automatic model
setup and binding using the model attribute for view-states. Please see the Binding to a Model
section for details.
OGNL vs EL
Web Flow 1 used OGNL exclusively for expressions within the flow definitions. Web Flow 2 adds
support for Unified EL. United EL is used when it is available, OGNL will continue to be used when a
Unified EL implementation is not available. Please see the Expression Language chapter for details.
Flash Scope
Flash scope in Web Flow 1 lived across the current request and into the next request. This was
conceptually similar to Web Flow 2's view scope concept, but the semantics were not as well defined. In
Web Flow 2, flash scope is cleared after every view render. This makes flashScope semantics in Web
Flow consistent with other web frameworks.
Spring Faces
Web Flow 2 offers significantly improved integration with JavaServerFaces. Please see the JSF
Integration chapter for details.
External Redirects
External redirects in Web Flow 1 were always considered context relative. In Web Flow 2, if the redirect
URL begins with a slash, it is considered servlet-relative instead of context-relative. URLs without a
leading slash are still context relative.
Guide
please define productname in your docbook file!
bean *
name *
method *
action-state action-state
id id
* parent
expression
parameter-type
attribute attribute
name name
type type
value value
bean *
name *
method *
decision-state decision-state
id id
* parent
end-actions on-end
end-state end-state
id id
view view
* parent
* commit
entry-actions on-entry
evaluate-action evaluate
expression expression
* result
* result-type
name *
scope *
exception-handler exception-handler
bean bean
exit-actions on-exit
flow flow
* start-state
* parent
* abstract
global-transitions global-transitions
if if
test test
then then
else else
import bean-import
resource resource
id *
input-attribute input
name name
required required
* type
* value
to type
required required
Guide
please define productname in your docbook file!
name *
scope *
output-attribute output
name name
required required
* type
* value
render-actions on-render
set set
attribute name
value value
* type
start-actions on-start
idref *
subflow-state subflow-state
id id
flow subflow
* parent
* subflow-attribute-mapper
transition transition
on on
on-exception on-exception
to to
* bind
value value
var var
name name
class class
view-state view-state
id id
view view
* parent
* redirect
* popup
* model
* history
* persistence-context
* render
* fragments
* secured
* attributes
* match
Guide