Merged feature branch mocca-1.2.13-id@r724 back to trunk.

git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@725 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4

11 files changed, 660 insertions, 625 deletions

diff --git a/BKUOnline/src/main/java/at/gv/egiz/bku/online/accesscontroller/SpringSecurityManager.java b/BKUOnline/src/main/java/at/gv/egiz/bku/online/accesscontroller/SpringSecurityManager.java
deleted file mode 100644
index 5795478b..00000000
--- a/BKUOnline/src/main/java/at/gv/egiz/bku/online/accesscontroller/SpringSecurityManager.java
+++ /dev/null
@@ -1,63 +0,0 @@
-/*

-* Copyright 2008 Federal Chancellery Austria and

-* Graz University of Technology

-*

-* Licensed under the Apache License, Version 2.0 (the "License");

-* you may not use this file except in compliance with the License.

-* You may obtain a copy of the License at

-*

-*     http://www.apache.org/licenses/LICENSE-2.0

-*

-* Unless required by applicable law or agreed to in writing, software

-* distributed under the License is distributed on an "AS IS" BASIS,

-* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

-* See the License for the specific language governing permissions and

-* limitations under the License.

-*/

-package at.gv.egiz.bku.online.accesscontroller;

-

-import java.io.IOException;

-

-import org.apache.commons.logging.Log;

-import org.apache.commons.logging.LogFactory;

-import org.springframework.context.ResourceLoaderAware;

-import org.springframework.core.io.Resource;

-import org.springframework.core.io.ResourceLoader;

-

-import at.gv.egiz.bku.accesscontroller.SecurityManagerFacade;

-import at.gv.egiz.bku.conf.Configurator;

-

-public class SpringSecurityManager extends SecurityManagerFacade implements

-		ResourceLoaderAware {

-

-	private ResourceLoader resourceLoader;

-

-	private static Log log = LogFactory.getLog(SpringSecurityManager.class);

-

-	protected Configurator config;

-

-	public void setConfig(Configurator config) {

-		this.config = config;

-	}

-

-	public void init() {

-		String noMatch = config.getProperty("AccessController.acceptNoMatch");

-		if (noMatch != null) {

-			log.debug("Setting allow now match to: " + noMatch);

-			setAllowUnmatched(Boolean.getBoolean(noMatch));

-		}

-		String policy = config.getProperty("AccessController.policyResource");

-		log.info("Loading resource: " + policy);

-		try {

-			Resource res = resourceLoader.getResource(policy);

-			init(res.getInputStream());

-		} catch (IOException e) {

-			log.error(e);

-		}

-	}

-

-	@Override

-	public void setResourceLoader(ResourceLoader loader) {

-		this.resourceLoader = loader;

-	}

-}

diff --git a/BKUOnline/src/main/java/at/gv/egiz/bku/online/conf/SpringConfigurator.java b/BKUOnline/src/main/java/at/gv/egiz/bku/online/conf/SpringConfigurator.java
deleted file mode 100644
index 6030c1c0..00000000
--- a/BKUOnline/src/main/java/at/gv/egiz/bku/online/conf/SpringConfigurator.java
+++ /dev/null
@@ -1,127 +0,0 @@
-/*

- * Copyright 2008 Federal Chancellery Austria and

- * Graz University of Technology

- *

- * Licensed under the Apache License, Version 2.0 (the "License");

- * you may not use this file except in compliance with the License.

- * You may obtain a copy of the License at

- *

- *     http://www.apache.org/licenses/LICENSE-2.0

- *

- * Unless required by applicable law or agreed to in writing, software

- * distributed under the License is distributed on an "AS IS" BASIS,

- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

- * See the License for the specific language governing permissions and

- * limitations under the License.

- */

-package at.gv.egiz.bku.online.conf;

-

-import java.io.File;

-import java.io.IOException;

-import java.io.InputStream;

-import java.util.Properties;

-

-import org.apache.commons.logging.Log;

-import org.apache.commons.logging.LogFactory;

-import org.springframework.context.ResourceLoaderAware;

-import org.springframework.core.io.Resource;

-import org.springframework.core.io.ResourceLoader;

-

-import at.gv.egiz.bku.conf.Configurator;

-import at.gv.egiz.bku.online.webapp.SpringBKUServlet;

-import at.gv.egiz.bku.slexceptions.SLRuntimeException;

-import at.gv.egiz.stal.service.impl.RequestBrokerSTALFactory;

-

-public class SpringConfigurator extends Configurator implements

-    ResourceLoaderAware {

-

-  private final static Log log = LogFactory.getLog(SpringConfigurator.class);

-

-  private ResourceLoader resourceLoader;

-

-  public void setResource(Resource resource) {

-    log.debug("Loading config from: " + resource);

-    if (resource != null) {

-      Properties props = new Properties();

-      try {

-        props.load(resource.getInputStream());

-        super.setConfiguration(props);

-      } catch (IOException e) {

-        log.error("Cannot load config", e);

-      }

-    } else {

-      log.warn("Cannot load properties, resource: " + resource);

-    }

-  }

-

-  public void configureNetwork() {

-    super.configureNetwork();

-    String appletTimeout = getProperty("AppletTimeout");

-    if ((appletTimeout != null)) {

-      try {

-        long ato = Long.parseLong(appletTimeout);

-        log.debug("Setting applet timeout to:"+ato);

-        RequestBrokerSTALFactory.setTimeout(ato);

-      } catch (NumberFormatException nfe) {

-        log.error("Cannot set Applettimeout", nfe);

-      }

-

-    }

-  }

-  

-  public void configure() {

-    super.configure();

-    SpringBKUServlet.setConfigurator(this);

-  }

-

-  @Override

-  public void setResourceLoader(ResourceLoader loader) {

-    this.resourceLoader = loader;

-  }

-

-  private File getDirectory(String property) {

-    if (property != null) {

-      Resource certDirRes = resourceLoader.getResource(property);

-      File certDir;

-      try {

-        certDir = certDirRes.getFile();

-      } catch (IOException e) {

-        log.error("Cannot get cert directory", e);

-        throw new SLRuntimeException(e);

-      }

-      if (!certDir.isDirectory()) {

-        log.error("Expecting directory as SSL.certDirectory parameter");

-        throw new SLRuntimeException(

-            "Expecting directory as SSL.certDirectory parameter");

-      }

-      return certDir;

-    }

-    return null;

-

-  }

-

-  @Override

-  protected File getCADir() {

-    String caDirectory = getProperty("SSL.caDirectory");

-    return getDirectory(caDirectory);

-  }

-

-  @Override

-  protected File getCertDir() {

-    String certDirectory = getProperty("SSL.certDirectory");

-    return getDirectory(certDirectory);

-  }

-

-  @Override

-  protected InputStream getManifest() {

-    Resource r = resourceLoader.getResource("META-INF/MANIFEST.MF");

-    if (r != null) {

-      try {

-        return r.getInputStream();

-      } catch (IOException e) {

-        log.error("Cannot read manifest data:", e);

-      }

-    }

-    return null;

-  }

-}
\ No newline at end of file
diff --git a/BKUOnline/src/main/java/at/gv/egiz/bku/online/spring/ServletContextPathFactoryBean.java b/BKUOnline/src/main/java/at/gv/egiz/bku/online/spring/ServletContextPathFactoryBean.java
new file mode 100644
index 00000000..27dfcd92
--- /dev/null
+++ b/BKUOnline/src/main/java/at/gv/egiz/bku/online/spring/ServletContextPathFactoryBean.java
@@ -0,0 +1,49 @@
+/*
+* Copyright 2009 Federal Chancellery Austria and
+* Graz University of Technology
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+
+package at.gv.egiz.bku.online.spring;
+
+import javax.servlet.ServletContext;
+
+import org.springframework.beans.factory.FactoryBean;
+import org.springframework.web.context.ServletContextAware;
+
+public class ServletContextPathFactoryBean implements FactoryBean, ServletContextAware {
+
+  private String contextPath;
+
+  @Override
+  public void setServletContext(ServletContext servletContext) {
+    contextPath = servletContext.getContextPath();
+  }
+
+  @Override
+  public Object getObject() throws Exception {
+    return contextPath;
+  }
+
+  @Override
+  public Class<?> getObjectType() {
+    return String.class;
+  }
+
+  @Override
+  public boolean isSingleton() {
+    return true;
+  }
+
+}
diff --git a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/AbstractWebRequestHandler.java b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/AbstractWebRequestHandler.java
new file mode 100644
index 00000000..019b8efe
--- /dev/null
+++ b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/AbstractWebRequestHandler.java
@@ -0,0 +1,327 @@
+/*
+* Copyright 2009 Federal Chancellery Austria and
+* Graz University of Technology
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+
+package at.gv.egiz.bku.online.webapp;
+
+import java.io.ByteArrayInputStream;
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.net.URI;
+import java.net.URISyntaxException;
+import java.util.Arrays;
+import java.util.Enumeration;
+import java.util.HashMap;
+import java.util.Locale;
+import java.util.Map;
+import java.util.regex.Pattern;
+
+import javax.servlet.ServletException;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import javax.servlet.http.HttpSession;
+
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.slf4j.MDC;
+
+import at.gv.egiz.bku.binding.HTTPBindingProcessor;
+import at.gv.egiz.bku.binding.HttpUtil;
+import at.gv.egiz.bku.binding.Id;
+import at.gv.egiz.bku.binding.IdFactory;
+import at.gv.egiz.bku.binding.InputDecoderFactory;
+import at.gv.egiz.bku.utils.StreamUtil;
+import at.gv.egiz.org.apache.tomcat.util.http.AcceptLanguage;
+
+public abstract class AbstractWebRequestHandler extends SpringBKUServlet {
+
+  private static final long serialVersionUID = 1L;
+  
+  public static final String APPLET_PAGE_P = "appletPage";
+  public static final String APPLET_PAGE_DEFAULT = "applet.jsp";
+  
+  public static final String PARAM_APPLET_WIDTH = "appletWidth";
+  public static final String ATTR_APPLET_WIDTH = "appletWidth";
+  
+  public static final String PARAM_APPLET_HEIGHT = "appletHeight";
+  public static final String ATTR_APPLET_HEIGHT = "appletHeight";
+  
+  public static final String PARAM_APPLET_BACKGROUND = "appletBackground";
+  public static final String ATTR_APPLET_BACKGROUND = "appletBackground";
+  
+  public static final String PARAM_APPLET_BACKGROUND_COLOR = "appletBackgroundColor";
+  public static final String ATTR_APPLET_BACKGROUND_COLOR = "appletBackgroundColor";
+  
+  public static final Pattern PATTERM_APPLET_BACKGROUND_COLOR = Pattern.compile("\\#[0-9a-fA-F]{6}");
+  public static final String PARAM_APPLET_GUI_STYLE = "appletGuiStyle";
+  public static final String ATTR_APPLET_GUI_STYLE = "appletGuiStyle";
+  
+  public static final String[] VALUES_APPLET_GUI_STYLE = new String[] {"tiny", "simple", "advanced"};
+  public static final String PARAM_APPLET_EXTENSION = "appletExtension";
+  public static final String ATTR_APPLET_EXTENSION = "appletExtension";
+  
+  public static final String[] VALUES_APPLET_EXTENSION = new String[] {"pin", "activation"};
+  public static final String PARAM_LOCALE = "locale";
+  public static final String ATTR_LOCALE = "locale";
+  
+  public static final Pattern PATTERN_LOCALE = Pattern.compile("[a-zA-Z][a-zA-Z](_[a-zA-Z][a-zA-Z]){0,2}");
+  public static final String REDIRECT_URL_SESSION_ATTRIBUTE = "redirectUrl";
+  
+  private final Logger log = LoggerFactory.getLogger(BKURequestHandler.class);
+
+  protected static String getStringFromStream(InputStream is, String encoding)
+      throws IOException {
+    if (is == null) {
+      return null;
+    }
+    if (encoding == null) {
+      encoding = HttpUtil.DEFAULT_CHARSET;
+    }
+    ByteArrayOutputStream os = new ByteArrayOutputStream();
+    StreamUtil.copyStream(is, os);
+    return new String(os.toByteArray(), encoding);
+  }
+  
+  protected abstract String getRequestProtocol(HttpServletRequest req);
+  
+  protected HTTPBindingProcessor getBindingProcessor(Id id, HttpServletRequest req, Locale locale) {
+    
+    // remove existing binding processor if present
+    getBindingProcessorManager().removeBindingProcessor(id);
+    
+    // create new binding processor
+    return (HTTPBindingProcessor) getBindingProcessorManager().createBindingProcessor(getRequestProtocol(req), locale);
+    
+  }
+  
+  @Override
+  protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException,
+      java.io.IOException {
+
+    String msg = (req.getSession(false) == null) ? "New session created."
+        : "Session already established.";
+    
+    Id id = IdFactory.getInstance().createId(req.getSession().getId());
+    MDC.put("id", id.toString());
+    
+    String acceptLanguage = req.getHeader("Accept-Language");
+    Locale locale = AcceptLanguage.getLocale(acceptLanguage);
+    
+    if (log.isInfoEnabled()) {
+      log.info("Recieved request (Accept-Language locale: {}). {}", locale, msg);
+    }
+        
+    try {
+    
+      HTTPBindingProcessor bindingProcessor = getBindingProcessor(id, req, locale);
+      
+      Map<String, String> headerMap = new HashMap<String, String>();
+      for (Enumeration<?> headerName = req.getHeaderNames(); headerName
+          .hasMoreElements();) {
+        String header = (String) headerName.nextElement();
+        if (header != null) {
+          headerMap.put(header, req.getHeader(header));
+        }
+      }
+          
+      InputStream inputStream;
+      String charset;
+      if (req.getMethod().equals("POST")) {
+        charset = req.getCharacterEncoding();
+        String contentType = req.getContentType();
+        if (charset != null) {
+          contentType += ";" + charset;
+        }
+        headerMap.put(HttpUtil.HTTP_HEADER_CONTENT_TYPE, contentType);
+        inputStream = req.getInputStream();
+      } else {
+        charset = "UTF-8";
+        headerMap.put(HttpUtil.HTTP_HEADER_CONTENT_TYPE,
+            InputDecoderFactory.URL_ENCODED);
+        String queryString = req.getQueryString();
+        if (queryString != null) {
+          inputStream = new ByteArrayInputStream(queryString.getBytes(charset));
+        } else {
+          inputStream = new ByteArrayInputStream(new byte[] {});
+        }
+      }
+      bindingProcessor.setHTTPHeaders(headerMap);
+      bindingProcessor.consumeRequestStream(req.getRequestURL().toString(),
+          inputStream);
+  
+      req.getInputStream().close();
+      getBindingProcessorManager().process(id, bindingProcessor);
+  
+      HttpSession session = req.getSession();
+  
+      log.trace("Looking for applet parameters in request.");
+  
+      // appletWidth
+      String width = getStringFromStream(bindingProcessor
+          .getFormData(PARAM_APPLET_WIDTH), charset);
+      if (width != null && !width.isEmpty()) {
+        try {
+          // must be a valid integer
+          session.setAttribute(ATTR_APPLET_WIDTH, Integer.parseInt(width));
+          log.debug("Found parameter " + PARAM_APPLET_WIDTH + "='{}'.", width);
+        } catch (NumberFormatException nfe) {
+          log.warn("Parameter " + PARAM_APPLET_WIDTH
+              + " does not contain a valid value.", nfe);
+        }
+      }
+  
+      // appletHeight
+      String height = getStringFromStream(bindingProcessor
+          .getFormData(PARAM_APPLET_HEIGHT), charset);
+      if (height != null && !height.isEmpty()) {
+        try {
+          // must be a valid integer
+          session.setAttribute(ATTR_APPLET_HEIGHT, Integer.parseInt(height));
+          log.debug("Found parameter " + PARAM_APPLET_HEIGHT + "='{}'.", height);
+        } catch (NumberFormatException nfe) {
+          log.warn("Parameter " + PARAM_APPLET_HEIGHT
+              + " does not contain a valid value.", nfe);
+        }
+      }
+  
+      // appletBackground
+      String background = getStringFromStream(bindingProcessor
+          .getFormData(PARAM_APPLET_BACKGROUND), charset);
+      if (background != null && !background.isEmpty()) {
+        session.setAttribute(ATTR_APPLET_BACKGROUND, background);
+        try {
+          // must be a valid http or https URL
+          URI backgroundURL = new URI(background);
+          if ("http".equals(backgroundURL.getScheme())
+              || "https".equals(backgroundURL.getScheme())) {
+            session.setAttribute(ATTR_APPLET_BACKGROUND, backgroundURL
+                .toASCIIString());
+            log.debug("Found parameter " + PARAM_APPLET_BACKGROUND + "='{}'.",
+                backgroundURL.toASCIIString());
+          } else {
+            log.warn("Parameter " + PARAM_APPLET_BACKGROUND
+                + "='{}' is not a valid http/https URL.", background);
+          }
+        } catch (URISyntaxException e) {
+          log.warn("Parameter " + PARAM_APPLET_BACKGROUND
+              + "='{}' is not a valid http/https URL.", background, e);
+        }
+      }
+  
+      // appletBackgroundColor
+      String backgroundColor = getStringFromStream(bindingProcessor
+          .getFormData(PARAM_APPLET_BACKGROUND_COLOR), charset);
+      if (backgroundColor != null && !backgroundColor.isEmpty()) {
+        // must be a valid color definition
+        if (PATTERM_APPLET_BACKGROUND_COLOR.matcher(backgroundColor).matches()) {
+          session.setAttribute(ATTR_APPLET_BACKGROUND_COLOR, backgroundColor);
+          log.debug("Faund parameter " + PARAM_APPLET_BACKGROUND_COLOR
+              + "='{}'.", backgroundColor);
+        } else {
+          log.warn("Parameter " + PARAM_APPLET_BACKGROUND_COLOR
+              + "='{}' is not a valid color definition "
+              + "(must be of form '#hhhhhh').", backgroundColor);
+        }
+      }
+  
+      // appletGuiStyle
+      String guiStyle = getStringFromStream(bindingProcessor
+          .getFormData(PARAM_APPLET_GUI_STYLE), charset);
+      if (guiStyle != null && !guiStyle.isEmpty()) {
+        // must be one of VALUES_APPLET_GUI_STYLE
+        String style = guiStyle.toLowerCase();
+        if (Arrays.asList(VALUES_APPLET_GUI_STYLE).contains(style)) {
+          session.setAttribute(ATTR_APPLET_GUI_STYLE, style);
+          log.debug("Found parameter " + PARAM_APPLET_GUI_STYLE + "='{}'.", style);
+        } else {
+          StringBuilder sb = new StringBuilder();
+          sb.append("Parameter ").append(PARAM_APPLET_GUI_STYLE).append(
+              "='").append(guiStyle).append("' is not valid (must be one of ")
+              .append(Arrays.toString(VALUES_APPLET_GUI_STYLE)).append(").");
+          log.warn(sb.toString());
+        }
+      }
+  
+      // appletExtension
+      String extension = getStringFromStream(bindingProcessor
+          .getFormData(PARAM_APPLET_EXTENSION), charset);
+      if (extension != null && !extension.isEmpty()) {
+        // must be one of VALUES_APPLET_EXTENSION
+        String ext = extension.toLowerCase();
+        if (Arrays.asList(VALUES_APPLET_EXTENSION).contains(ext)) {
+          session.setAttribute(ATTR_APPLET_EXTENSION, ext);
+          log.debug("Found parameter " + PARAM_APPLET_EXTENSION + "='{}'.", ext);
+        } else {
+          StringBuilder sb = new StringBuilder();
+          sb.append("Parameter ").append(PARAM_APPLET_EXTENSION).append(
+              "='").append(extension).append("' is not valid (must be one of ")
+              .append(Arrays.toString(VALUES_APPLET_EXTENSION)).append(").");
+          log.warn(sb.toString());
+        }
+      }
+  
+      // locale
+      String localeFormParam = getStringFromStream(bindingProcessor
+          .getFormData(PARAM_LOCALE), charset);
+      if (localeFormParam != null && !localeFormParam.isEmpty()) {
+        // must be a valid locale 
+        if (PATTERN_LOCALE.matcher(localeFormParam).matches()) {
+          locale = new Locale(localeFormParam);
+          log.debug("Override accept-language header locale {} "
+              + "with form param {}.", locale, localeFormParam);
+        } else {
+          log.warn("Parameter " + PARAM_LOCALE
+              + "='{}' is not a valid locale definition.", localeFormParam);
+        }
+      }
+      if (locale != null) {
+        log.debug("Using locale {}.", locale);
+        session.setAttribute(ATTR_LOCALE, locale.toString());
+      }
+          
+      beforeAppletPage(req, bindingProcessor);
+          
+      String appletPage = getStringFromStream(bindingProcessor
+          .getFormData(APPLET_PAGE_P), charset);
+      if (appletPage == null || appletPage.isEmpty()) {
+        appletPage = APPLET_PAGE_DEFAULT;
+      }
+      log.debug("Sending redirect to UI page '{}'.", appletPage);
+      resp.sendRedirect(appletPage);
+      
+    } finally {
+      MDC.remove("id");
+    }
+  }
+
+  @Override
+  protected void doGet(HttpServletRequest req, HttpServletResponse resp)
+      throws ServletException, java.io.IOException {
+    doPost(req, resp);
+  }
+
+  /**
+   * Called before the request is forwarded or redirected to the Applet page.
+   * 
+   * @param req
+   * @param bindingProcessor
+   */
+  protected void beforeAppletPage(HttpServletRequest req,
+      HTTPBindingProcessor bindingProcessor) {
+  }
+  
+}
diff --git a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/AppletDispatcher.java b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/AppletDispatcher.java
index 24938cd5..9e455621 100644
--- a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/AppletDispatcher.java
+++ b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/AppletDispatcher.java
@@ -24,8 +24,8 @@ import javax.servlet.ServletException;
 import javax.servlet.http.HttpServlet;
 import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;
-import org.apache.commons.logging.Log;
-import org.apache.commons.logging.LogFactory;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
 
 /**
  * prevent applet caching, 
@@ -35,7 +35,9 @@ import org.apache.commons.logging.LogFactory;
  */
 public class AppletDispatcher extends HttpServlet {
 
-  protected final static Log log = LogFactory.getLog(AppletDispatcher.class);
+  private static final long serialVersionUID = 1L;
+
+  private final Logger log = LoggerFactory.getLogger(AppletDispatcher.class);
 
   public static final String DISPATCH_CTX = "dispatch/";
   public static final String RAND_PREFIX = "__";
@@ -65,10 +67,7 @@ public class AppletDispatcher extends HttpServlet {
       uri = archivePattern.matcher(uri).replaceAll(".jar");
 //      log.trace("removing random suffix " + uri);
       
-      if (log.isTraceEnabled()) {
-        log.trace("dispatching request URI " + request.getRequestURI() +
-                " to " + uri);
-      }
+      log.trace("Dispatching request URI {} to {}.", request.getRequestURI(), uri);
       
       RequestDispatcher dispatcher = getServletContext().getRequestDispatcher(uri);
       dispatcher.forward(request, response);
diff --git a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/BKURequestHandler.java b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/BKURequestHandler.java
index 7dfec211..d42f911c 100644
--- a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/BKURequestHandler.java
+++ b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/BKURequestHandler.java
@@ -16,302 +16,37 @@
  */
 package at.gv.egiz.bku.online.webapp;
 
-import java.io.ByteArrayOutputStream;
-import java.io.IOException;
-import java.io.InputStream;
-import java.net.MalformedURLException;
-import java.net.URI;
-import java.net.URISyntaxException;
-import java.net.URL;
-import java.net.URLEncoder;
-import java.util.Arrays;
-import java.util.Enumeration;
-import java.util.HashMap;
-import java.util.Locale;
-import java.util.Map;
-import java.util.regex.Pattern;
-
-import javax.servlet.RequestDispatcher;
-import javax.servlet.ServletException;
 import javax.servlet.http.HttpServletRequest;
-import javax.servlet.http.HttpServletResponse;
-import javax.servlet.http.HttpSession;
 
-import org.apache.commons.logging.Log;
-import org.apache.commons.logging.LogFactory;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
 
-import at.gv.egiz.bku.binding.BindingProcessor;
 import at.gv.egiz.bku.binding.HTTPBindingProcessor;
-import at.gv.egiz.bku.binding.HttpUtil;
-import at.gv.egiz.bku.binding.IdFactory;
-import at.gv.egiz.bku.utils.StreamUtil;
-import at.gv.egiz.org.apache.tomcat.util.http.AcceptLanguage;
+import at.gv.egiz.bku.binding.HTTPBindingProcessorImpl;
 
 /**
  * Handles SL requests and instantiates BindingProcessors
  * 
  */
-public class BKURequestHandler extends SpringBKUServlet {
-
-  private static final long serialVersionUID = 1L;
-
-  public static final String APPLET_PAGE_P = "appletPage";
-  public static final String APPLET_PAGE_DEFAULT = "BKUApplet";
-  
-  public static final String PARAM_APPLET_WIDTH = "appletWidth";
-  public static final String ATTR_APPLET_WIDTH = "appletWidth";
-  
-  public static final String PARAM_APPLET_HEIGHT = "appletHeight";
-  public static final String ATTR_APPLET_HEIGHT = "appletHeight";
+public class BKURequestHandler extends AbstractWebRequestHandler {
   
-  public static final String PARAM_APPLET_BACKGROUND = "appletBackground";
-  public static final String ATTR_APPLET_BACKGROUND = "appletBackground";
-  
-  public static final String PARAM_APPLET_BACKGROUND_COLOR = "appletBackgroundColor";
-  public static final String ATTR_APPLET_BACKGROUND_COLOR = "appletBackgroundColor";
-  public static final Pattern PATTERM_APPLET_BACKGROUND_COLOR = Pattern.compile("\\#[0-9a-fA-F]{6}");
-  
-  public static final String PARAM_APPLET_GUI_STYLE = "appletGuiStyle";
-  public static final String ATTR_APPLET_GUI_STYLE = "appletGuiStyle";
-  public static final String[] VALUES_APPLET_GUI_STYLE = new String[] {"tiny", "simple", "advanced"};
+  private static final long serialVersionUID = 1L;
   
-  public static final String PARAM_APPLET_EXTENSION = "appletExtension";
-  public static final String ATTR_APPLET_EXTENSION = "appletExtension";
-  public static final String[] VALUES_APPLET_EXTENSION = new String[] {"pin", "activation"};
+  private final Logger log = LoggerFactory.getLogger(BKURequestHandler.class);
   
-  public static final String PARAM_LOCALE = "locale";
-  public static final String ATTR_LOCALE = "locale";
-  public static final Pattern PATTERN_LOCALE = Pattern.compile("[a-zA-Z][a-zA-Z](_[a-zA-Z][a-zA-Z]){0,2}");
-
-  public final static String REDIRECT_URL_SESSION_ATTRIBUTE = "redirectUrl";
-
-  protected Log log = LogFactory.getLog(BKURequestHandler.class);
-
-  private static String getStringFromStream(InputStream is, String encoding)
-      throws IOException {
-    if (is == null) {
-      return null;
-    }
-    if (encoding == null) {
-      encoding = HttpUtil.DEFAULT_CHARSET;
-    }
-    ByteArrayOutputStream os = new ByteArrayOutputStream();
-    StreamUtil.copyStream(is, os);
-    return new String(os.toByteArray(), encoding);
-  }
-
   @Override
-  protected void doPost(HttpServletRequest req, HttpServletResponse resp)
-      throws ServletException, java.io.IOException {
-    log.debug("Received SecurityLayer request");
-    
-    HttpSession session = req.getSession(false);
-    if (session != null) {
-      log.warn("Already a session with id: " + session.getId()
-          + " active, trying to get Bindingprocessor");
-      BindingProcessor bp = getBindingProcessorManager().getBindingProcessor(
-          IdFactory.getInstance().createId(session.getId()));
-      if (bp != null) {
-        log.debug("Found binding processor, using this one");
-        String appletPage = getStringFromStream(
-                ((HTTPBindingProcessor) bp).getFormData(APPLET_PAGE_P),
-                req.getCharacterEncoding());
-        getDispatcher(appletPage).forward(req, resp);
-        return;
-      }
-      log.debug("Did not find a binding processor, creating new ...");
-    }
-    session = req.getSession(true);
-    if (log.isDebugEnabled()) {
-      log.debug("Using session id: " + session.getId());
-    }
-
-    String acceptLanguage = req.getHeader("Accept-Language");
-    Locale locale = AcceptLanguage.getLocale(acceptLanguage);
-    log.debug("Accept-Language locale: " + locale);
-
-    HTTPBindingProcessor bindingProcessor;
-    bindingProcessor = (HTTPBindingProcessor) getBindingProcessorManager()
-        .createBindingProcessor(req.getRequestURL().toString(),
-            session.getId(), locale);
-
-    Map<String, String> headerMap = new HashMap<String, String>();
-    for (Enumeration<String> headerName = req.getHeaderNames(); headerName
-        .hasMoreElements();) {
-      String header = headerName.nextElement();
-      if (header != null) {
-        headerMap.put(header, req.getHeader(header));
-      }
-    }
-    String charset = req.getCharacterEncoding();
-    String contentType = req.getContentType();
-    if (charset != null) {
-      contentType += ";" + charset;
-    }
-    headerMap.put(HttpUtil.HTTP_HEADER_CONTENT_TYPE, contentType);
-    bindingProcessor.setHTTPHeaders(headerMap);
-    bindingProcessor.consumeRequestStream(req.getInputStream());
-    req.getInputStream().close();
-    getBindingProcessorManager().process(bindingProcessor);
-
-    log.trace("Trying to find applet parameters in request");
-
-    // appletWidth
-    String width = getStringFromStream(bindingProcessor
-        .getFormData(PARAM_APPLET_WIDTH), charset);
-    if (width != null) {
-      try {
-        // must be a valid integer
-        session.setAttribute(ATTR_APPLET_WIDTH, Integer.parseInt(width));
-        log.trace("Found parameter " + PARAM_APPLET_WIDTH + "='" + width +"'.");
-      } catch (NumberFormatException nfe) {
-        log.warn("Applet parameter " + PARAM_APPLET_WIDTH + 
-            " does not contain a valid value.", nfe);
-      }
-    }
-    
-    // appletHeight
-    String height = getStringFromStream(bindingProcessor
-        .getFormData(PARAM_APPLET_HEIGHT), charset);
-    if (height != null) {
-      try {
-        // must be a valid integer
-        session.setAttribute(ATTR_APPLET_HEIGHT, Integer.parseInt(height));
-        log.trace("Found parameter " + PARAM_APPLET_HEIGHT + "='" + height + "'.");
-      } catch (NumberFormatException nfe) {
-        log.warn("Applet parameter " + PARAM_APPLET_HEIGHT + 
-            " does not contain a valid value.", nfe);
-      }
-    }
-    
-    // appletBackground
-    String background = getStringFromStream(bindingProcessor
-        .getFormData(PARAM_APPLET_BACKGROUND), charset);
-    if (background != null) {
-      session.setAttribute(ATTR_APPLET_BACKGROUND, background);
-      try {
-        // must be a valid http or https URL
-        URI backgroundURL = new URI(background);
-        if ("http".equals(backgroundURL.getScheme()) 
-            || "https".equals(backgroundURL.getScheme())) {
-          session.setAttribute(ATTR_APPLET_BACKGROUND, backgroundURL.toASCIIString());
-          log.trace("Found parameter " + PARAM_APPLET_BACKGROUND + "='" 
-              + backgroundURL.toASCIIString() + "'.");
-        } else {
-          log.warn("Applet parameter " + PARAM_APPLET_BACKGROUND + "='" 
-              + background + "' is not a valid http/https URL.");
-        }
-      } catch (URISyntaxException e) {
-        log.warn("Applet parameter " + PARAM_APPLET_BACKGROUND + "='" 
-            + background + "' is not a valid http/https URL.", e);
-      }
-    }
-    
-    // appletBackgroundColor
-    String backgroundColor = getStringFromStream(bindingProcessor
-        .getFormData(PARAM_APPLET_BACKGROUND_COLOR), charset);
-    if (backgroundColor != null) {
-      // must be a valid color definition
-      if (PATTERM_APPLET_BACKGROUND_COLOR.matcher(backgroundColor).matches()) {
-        session.setAttribute(ATTR_APPLET_BACKGROUND_COLOR, backgroundColor);
-        log.trace("Faund parameter " + PARAM_APPLET_BACKGROUND_COLOR + "='" 
-            + backgroundColor + "'.");
-      } else {
-        log.warn("Applet parameter " + PARAM_APPLET_BACKGROUND_COLOR + "='" 
-            + backgroundColor + "' is not a valid color definition (must be of form '#hhhhhh').");
-      }
-    }
-    
-    // appletGuiStyle
-    String guiStyle = getStringFromStream(bindingProcessor
-        .getFormData(PARAM_APPLET_GUI_STYLE), charset);
-    if (guiStyle != null) {
-      // must be one of VALUES_APPLET_GUI_STYLE
-      String style = guiStyle.toLowerCase();
-      if (Arrays.asList(VALUES_APPLET_GUI_STYLE).contains(style)) {
-        session.setAttribute(ATTR_APPLET_GUI_STYLE, style);
-        log.trace("Found parameter " + PARAM_APPLET_GUI_STYLE + "='" 
-            + style + "'.");
-      } else {
-        StringBuilder sb = new StringBuilder();
-        sb.append("Applet parameter ").append(PARAM_APPLET_GUI_STYLE).append(
-            "='").append(guiStyle).append("' is not valid (must be one of ")
-            .append(Arrays.toString(VALUES_APPLET_GUI_STYLE)).append(").");
-        log.warn(sb);
-      }
-    }
-
-    // appletExtension
-    String extension = getStringFromStream(bindingProcessor
-        .getFormData(PARAM_APPLET_EXTENSION), charset);
-    if (extension != null) {
-      // must be one of VALUES_APPLET_EXTENSION
-      String ext = extension.toLowerCase();
-      if (Arrays.asList(VALUES_APPLET_EXTENSION).contains(ext)) {
-        session.setAttribute(ATTR_APPLET_EXTENSION, ext);
-        log.trace("Found parameter " + PARAM_APPLET_EXTENSION + "='" 
-            + ext + "'.");
-      } else {
-        StringBuilder sb = new StringBuilder();
-        sb.append("Applet parameter ").append(PARAM_APPLET_EXTENSION).append(
-            "='").append(extension).append("' is not valid (must be one of ")
-            .append(Arrays.toString(VALUES_APPLET_EXTENSION)).append(").");
-        log.warn(sb);
-      }
-    }
-
-    // locale
-    String localeFormParam = getStringFromStream(bindingProcessor
-        .getFormData(PARAM_LOCALE), charset);
-    if (localeFormParam != null) {
-      // must be a valid locale
-      if (PATTERN_LOCALE.matcher(localeFormParam).matches()) {
-        locale = new Locale(localeFormParam);
-        log.debug("Overrule accept-language header locale " + locale
-            + " with form param " + localeFormParam + ".");
-      } else {
-        log.warn("Parameter " + PARAM_LOCALE + "='" + localeFormParam
-            + "' is not a valid locale definition.");
-      }
-    }
-    if (locale != null) {
-      log.debug("Using locale " + locale);
-      session.setAttribute(ATTR_LOCALE, locale.toString());
-    }
-    
+  protected void beforeAppletPage(HttpServletRequest req, HTTPBindingProcessor bindingProcessor) {
     // handle server side redirect url after processing
-    String redirectUrl = bindingProcessor.getRedirectURL(); 
+    String redirectUrl = ((HTTPBindingProcessorImpl) bindingProcessor).getRedirectURL(); 
     if ( redirectUrl != null) {
-      log.info("Got redirect URL "+redirectUrl+". Deferring browser redirect.");
-      session.setAttribute(REDIRECT_URL_SESSION_ATTRIBUTE, redirectUrl);
+      log.info("Got redirect URL '{}'. Deferring browser redirect.", redirectUrl);
+      req.getSession().setAttribute(REDIRECT_URL_SESSION_ATTRIBUTE, redirectUrl);
     }
-
-    String appletPage = getStringFromStream(bindingProcessor
-        .getFormData(APPLET_PAGE_P), charset);
-    getDispatcher(appletPage).forward(req, resp);
   }
 
   @Override
-  protected void doGet(HttpServletRequest req, HttpServletResponse resp)
-      throws ServletException, java.io.IOException {
-    doPost(req, resp);
-  }
-
-  private RequestDispatcher getDispatcher(String appletPage) {
-    RequestDispatcher dispatcher = null;
-    if (appletPage != null) {
-      log.trace("requested appletPage " + appletPage);
-      dispatcher = getServletContext().getNamedDispatcher(appletPage);
-    }
-    if (dispatcher == null) {
-      log.debug("no appletPage requested or appletPage not configured, using default");
-      appletPage = APPLET_PAGE_DEFAULT;
-      dispatcher = getServletContext().getNamedDispatcher(appletPage);
-    }
-//    session.setAttribute(APPLET_PAGE_P, appletPage);
-    log.debug("forward to applet " + appletPage);
-
-    return dispatcher;
+  protected String getRequestProtocol(HttpServletRequest req) {
+    return "HTTP";
   }
 
 }
diff --git a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/MoccaContextListener.java b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/MoccaContextListener.java
new file mode 100644
index 00000000..8d65c92e
--- /dev/null
+++ b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/MoccaContextListener.java
@@ -0,0 +1,128 @@
+/*
+* Copyright 2009 Federal Chancellery Austria and
+* Graz University of Technology
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+
+package at.gv.egiz.bku.online.webapp;
+
+import iaik.security.ecc.provider.ECCProvider;
+import iaik.security.provider.IAIK;
+import iaik.xml.crypto.XSecProvider;
+
+import java.security.Provider;
+import java.security.Security;
+import java.util.ArrayList;
+import java.util.List;
+
+import javax.servlet.ServletContext;
+import javax.servlet.ServletContextEvent;
+import javax.servlet.ServletContextListener;
+
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+
+public class MoccaContextListener implements ServletContextListener {
+  
+  public static final String DISABLE_SECURITY_PROVIDER_REGISTRATION = "disableSecurityProviderRegistration";
+  
+  private Logger log = LoggerFactory.getLogger(MoccaContextListener.class);
+
+  private final List<Provider> selfRegisteredProviders = new ArrayList<Provider>(); 
+  
+  @Override
+  public void contextDestroyed(ServletContextEvent sce) {
+    log.info("Deregistering self registered security providers.");
+    
+    for (Provider provider : selfRegisteredProviders) {
+      Security.removeProvider(provider.getName());
+    }
+    selfRegisteredProviders.clear();
+    
+  }
+
+  @Override
+  public void contextInitialized(ServletContextEvent sce) {
+    
+    ServletContext servletContext = sce.getServletContext();
+    if (!Boolean.parseBoolean(servletContext.getInitParameter(DISABLE_SECURITY_PROVIDER_REGISTRATION))) {
+      log.info("Looking for required and registered security providers ...");
+      
+      registerProviders();
+      
+      if (!selfRegisteredProviders.isEmpty()) {
+        log.warn("Security providers have been registered. "
+            + "This may affect other contexts in the same container!");
+      }
+      
+      if (log.isDebugEnabled()) {
+        StringBuilder sb = new StringBuilder();
+        sb.append("Registered providers: ");
+        int i = 1;
+        for (Provider prov : Security.getProviders()) {
+          sb.append("\n" + (i++) + ". : " + prov);
+        }
+        log.debug(sb.toString());
+      }
+    }
+
+
+  }
+
+  
+  protected void registerProvider(Provider provider, int position) {
+    String name = provider.getName();
+    if (Security.getProvider(name) == null) {
+      // register IAIK provider at first position
+      try {
+        if (position > 0) {
+          position = Security.insertProviderAt(provider, position);
+        } else {
+          position = Security.addProvider(provider);
+        }
+        log.info("Required security Provider {} was not yet registered. "
+            + "Now registered at position {}.", name, position);
+        selfRegisteredProviders.add(provider);
+      } catch (SecurityException e) {
+        log.info("Failed to register required security Provider.", e);
+      }
+    } else {
+      log.info("Required security Provider {} already registered.", name);
+    }
+    
+  }
+  
+  protected void registerProviders() {
+
+    registerProvider(new IAIK(), 1);
+    registerProvider(new ECCProvider(false), 2);
+    
+    final String name = XSecProvider.NAME;
+    if (Security.getProvider(XSecProvider.NAME) == null) {
+      // register XML Security provider
+      try {
+        XSecProvider.addAsProvider(false);
+        log.info("Required security Provider {} was not yet registered. "
+            + "Now registered.", name);
+        selfRegisteredProviders.add(Security.getProvider(name));
+      } catch (SecurityException e) {
+        log.info("Failed to register required security Provider.", e);
+      }
+    } else {
+      log.info("Required security Provider {} already registered.", name);
+    }
+    
+  }
+
+}
diff --git a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/ResultServlet.java b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/ResultServlet.java
index 5ffe2399..5fd01775 100644
--- a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/ResultServlet.java
+++ b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/ResultServlet.java
@@ -25,13 +25,14 @@ import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;
 import javax.servlet.http.HttpSession;
 
-import org.apache.commons.logging.Log;
-import org.apache.commons.logging.LogFactory;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.slf4j.MDC;
 
+import at.gv.egiz.bku.binding.BindingProcessor;
 import at.gv.egiz.bku.binding.HTTPBindingProcessor;
-import at.gv.egiz.bku.binding.HttpUtil;
+import at.gv.egiz.bku.binding.Id;
 import at.gv.egiz.bku.binding.IdFactory;
-import at.gv.egiz.bku.conf.Configurator;
 import at.gv.egiz.bku.utils.NullOutputStream;
 
 /**
@@ -40,7 +41,9 @@ import at.gv.egiz.bku.utils.NullOutputStream;
  */
 public class ResultServlet extends SpringBKUServlet {
 
-  private final static Log log = LogFactory.getLog(ResultServlet.class);
+  private static final long serialVersionUID = 1L;
+
+  private final Logger log = LoggerFactory.getLogger(ResultServlet.class);
 
   private String encoding = "UTF-8";
   private String expiredPage = "./expiredError.jsp";
@@ -51,12 +54,12 @@ public class ResultServlet extends SpringBKUServlet {
   private void myInit() {
     String enc = getServletContext().getInitParameter("responseEncoding");
     if (enc != null) {
-      log.debug("Init default encoding to: " + enc);
+      log.trace("Init default encoding to: {}.", enc);
       encoding = enc;
     }
     String expP = getServletConfig().getInitParameter("expiredPage");
     if (expP != null) {
-      log.debug("Init expired page to: " + expP);
+      log.trace("Init expired page to: {}.", expP);
       expiredPage = expP;
     }
   }
@@ -80,75 +83,65 @@ public class ResultServlet extends SpringBKUServlet {
 
   protected void doGet(HttpServletRequest req, HttpServletResponse resp)
       throws ServletException, java.io.IOException { 
-    String version = configurator.getProperty(Configurator.SIGNATURE_LAYOUT);
-    if ((version != null) && (!"".equals(version.trim()))) {
-      log.debug("setting SignatureLayout header to " + version);
-      resp.setHeader(Configurator.SIGNATURE_LAYOUT, version);
-    } else {
-      log.debug("do not set SignatureLayout header");
-    }
-      
-    if (configurator.getProperty(Configurator.USERAGENT_CONFIG_P) != null) {
-      resp.setHeader(HttpUtil.HTTP_HEADER_SERVER, configurator
-          .getProperty(Configurator.USERAGENT_CONFIG_P));
-    } else {
-      resp.setHeader(HttpUtil.HTTP_HEADER_SERVER,
-              Configurator.USERAGENT_DEFAULT);
-    }
 
     HttpSession session = req.getSession(false);
     if (session == null) {
       resp.sendRedirect(expiredPage);
       return;
     }
-    String sessionId = session.getId();
-    if (sessionId == null) {
-      resp.sendRedirect(expiredPage);
-      return;
-    }
-    log.debug("Got a result request for session: " + sessionId);
-    HTTPBindingProcessor bp = (HTTPBindingProcessor) getBindingProcessorManager()
-        .getBindingProcessor(IdFactory.getInstance().createId(sessionId));
-    if (bp == null) {
+
+    Id id = IdFactory.getInstance().createId(session.getId());
+
+    HTTPBindingProcessor bp;
+    BindingProcessor bindingProcessor = getBindingProcessorManager().getBindingProcessor(id);
+    if (bindingProcessor instanceof HTTPBindingProcessor) {
+      bp = (HTTPBindingProcessor) bindingProcessor;
+    } else {
       session.invalidate();
       resp.sendRedirect(expiredPage);
       return;
     }
-    String redirectUrl = (String) session
-        .getAttribute(BKURequestHandler.REDIRECT_URL_SESSION_ATTRIBUTE);
-    if (redirectUrl == null) {
-      redirectUrl = bp.getRedirectURL();
-    }
-    if (redirectUrl != null) {
-      try {
-        bp.writeResultTo(new NullOutputStream(), encoding);
-        getBindingProcessorManager().removeBindingProcessor(bp.getId());
-      } finally {
-          log.info("Executing deferred browser redirect to: " + redirectUrl);
-        resp.sendRedirect(redirectUrl);
-        session.invalidate();
+    MDC.put("id", id.toString());
+    
+    try {
+      String redirectUrl = (String) session
+          .getAttribute(AbstractWebRequestHandler.REDIRECT_URL_SESSION_ATTRIBUTE);
+      if (redirectUrl == null) {
+        redirectUrl = bp.getRedirectURL();
       }
-      return;
-    }
-
-    log.trace("setting response code: " + bp.getResponseCode());
-    resp.setStatus(bp.getResponseCode());
-    resp.setHeader("Cache-Control", "no-store"); // HTTP 1.1
-    resp.setHeader("Pragma", "no-cache"); // HTTP 1.0
-    resp.setDateHeader("Expires", 0);
-    for (Iterator<String> it = bp.getResponseHeaders().keySet().iterator(); it
-        .hasNext();) {
-      String header = it.next();
-      if (log.isTraceEnabled()) {
-        log.trace("setting response header " + header + ": " + bp.getResponseHeaders().get(header));
+      if (redirectUrl != null) {
+        try {
+          bp.writeResultTo(new NullOutputStream(), encoding);
+          getBindingProcessorManager().removeBindingProcessor(bp.getId());
+        } finally {
+          log.info("Sending deferred redirect, RedirectURL={}.", redirectUrl);
+          resp.sendRedirect(redirectUrl);
+          session.invalidate();
+        }
+        return;
+      }
+  
+      log.trace("Setting response code: {}.", bp.getResponseCode());
+      resp.setStatus(bp.getResponseCode());
+      resp.setHeader("Cache-Control", "no-store"); // HTTP 1.1
+      resp.setHeader("Pragma", "no-cache"); // HTTP 1.0
+      resp.setDateHeader("Expires", 0);
+      for (Iterator<String> it = bp.getResponseHeaders().keySet().iterator(); it
+          .hasNext();) {
+        String header = it.next();
+        log.trace("Setting response header {}: {}.", header, bp.getResponseHeaders().get(header));
+        resp.setHeader(header, bp.getResponseHeaders().get(header));
       }
-      resp.setHeader(header, bp.getResponseHeaders().get(header));
+      resp.setContentType(bp.getResultContentType());
+      resp.setCharacterEncoding(encoding);
+      log.info("Sending result.");
+      bp.writeResultTo(resp.getOutputStream(), encoding);
+      resp.getOutputStream().flush();
+      session.invalidate();
+      getBindingProcessorManager().removeBindingProcessor(bp.getId());
+      
+    } finally {
+      MDC.remove("id");
     }
-    resp.setContentType(bp.getResultContentType());
-    resp.setCharacterEncoding(encoding);
-    bp.writeResultTo(resp.getOutputStream(), encoding);
-    resp.getOutputStream().flush();
-    session.invalidate();
-    getBindingProcessorManager().removeBindingProcessor(bp.getId());
   }
 }
diff --git a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/SessionTimeout.java b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/SessionListener.java
index 2b56166c..1bec31b6 100644
--- a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/SessionTimeout.java
+++ b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/SessionListener.java
@@ -14,36 +14,34 @@
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
-package at.gv.egiz.bku.online.webapp;

-

-import javax.servlet.http.HttpSessionEvent;

-import javax.servlet.http.HttpSessionListener;

-

-import org.apache.commons.logging.Log;

-import org.apache.commons.logging.LogFactory;

-

-import at.gv.egiz.bku.binding.BindingProcessorManager;

-import at.gv.egiz.bku.binding.IdFactory;

-

-/**

- * Session listener to trigger the removal of the BindingProcessor

- *

- */

-public class SessionTimeout implements HttpSessionListener {

-  

-  private static Log log = LogFactory.getLog(SessionTimeout.class);

-

-  @Override

-  public void sessionCreated(HttpSessionEvent arg0) {

-    // TODO Auto-generated method stub

-

-  }

-

-  @Override

-  public void sessionDestroyed(HttpSessionEvent event) {

-    BindingProcessorManager manager = (BindingProcessorManager) event.getSession().getServletContext().getAttribute(SpringBKUServlet.BEAN_NAME);

-    log.info("Removing session: "+event.getSession().getId());

-    manager.removeBindingProcessor(IdFactory.getInstance().createId(event.getSession().getId()));

-  }

-

-}

+package at.gv.egiz.bku.online.webapp;
+
+import javax.servlet.http.HttpSessionEvent;
+import javax.servlet.http.HttpSessionListener;
+
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+
+import at.gv.egiz.bku.binding.BindingProcessorManager;
+import at.gv.egiz.bku.binding.IdFactory;
+
+/**
+ * Session listener to trigger the removal of the BindingProcessor
+ *
+ */
+public class SessionListener implements HttpSessionListener {
+  
+  private final Logger log = LoggerFactory.getLogger(SessionListener.class);
+
+  @Override
+  public void sessionCreated(HttpSessionEvent event) {
+  }
+
+  @Override
+  public void sessionDestroyed(HttpSessionEvent event) {
+    BindingProcessorManager manager = (BindingProcessorManager) event.getSession().getServletContext().getAttribute(SpringBKUServlet.BEAN_NAME);
+    manager.removeBindingProcessor(IdFactory.getInstance().createId(event.getSession().getId()));
+    log.info("Session {} destroyed.", event.getSession().getId());
+  }
+
+}
diff --git a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/ShutdownHandler.java b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/ShutdownHandler.java
index 741b5e32..39d7368d 100644
--- a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/ShutdownHandler.java
+++ b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/ShutdownHandler.java
@@ -1,48 +1,48 @@
-/*

- * Copyright 2008 Federal Chancellery Austria and

- * Graz University of Technology

- * 

- * Licensed under the Apache License, Version 2.0 (the "License");

- * you may not use this file except in compliance with the License.

- * You may obtain a copy of the License at

- * 

- *     http://www.apache.org/licenses/LICENSE-2.0

- * 

- * Unless required by applicable law or agreed to in writing, software

- * distributed under the License is distributed on an "AS IS" BASIS,

- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

- * See the License for the specific language governing permissions and

- * limitations under the License.

- */

-

-package at.gv.egiz.bku.online.webapp;

-

-import org.apache.commons.logging.Log;

-import org.apache.commons.logging.LogFactory;

-import org.springframework.context.ApplicationEvent;

-import org.springframework.context.ApplicationListener;

-import org.springframework.context.event.ContextClosedEvent;

-

-import at.gv.egiz.bku.binding.BindingProcessorManager;

-

-public class ShutdownHandler implements ApplicationListener {

-

-	private static Log log = LogFactory.getLog(ShutdownHandler.class);

-

-	private BindingProcessorManager bindingProcessorManager;

-

-	public void setBindingProcessorManager(

-			BindingProcessorManager bindingProcessorManager) {

-		this.bindingProcessorManager = bindingProcessorManager;

-	}

-

-	@Override

-	public void onApplicationEvent(ApplicationEvent event) {

-		if (event instanceof ContextClosedEvent) {

-			log.info("Shutting down BKU");

-			bindingProcessorManager.shutdownNow();

-		}

-

-	}

-

-}

+/*
+ * Copyright 2008 Federal Chancellery Austria and
+ * Graz University of Technology
+ * 
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * 
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ * 
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package at.gv.egiz.bku.online.webapp;
+
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.context.ApplicationEvent;
+import org.springframework.context.ApplicationListener;
+import org.springframework.context.event.ContextClosedEvent;
+
+import at.gv.egiz.bku.binding.BindingProcessorManager;
+
+public class ShutdownHandler implements ApplicationListener {
+
+	private final Logger log = LoggerFactory.getLogger(ShutdownHandler.class);
+
+	private BindingProcessorManager bindingProcessorManager;
+
+	public void setBindingProcessorManager(
+			BindingProcessorManager bindingProcessorManager) {
+		this.bindingProcessorManager = bindingProcessorManager;
+	}
+
+	@Override
+	public void onApplicationEvent(ApplicationEvent event) {
+		if (event instanceof ContextClosedEvent) {
+			log.info("Shutting down MOCCA.");
+			bindingProcessorManager.shutdownNow();
+		}
+
+	}
+
+}
diff --git a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/SpringBKUServlet.java b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/SpringBKUServlet.java
index 2c6f522e..6a6f11e8 100644
--- a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/SpringBKUServlet.java
+++ b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/SpringBKUServlet.java
@@ -19,19 +19,15 @@ package at.gv.egiz.bku.online.webapp;
 import javax.servlet.http.HttpServlet;
 
 import at.gv.egiz.bku.binding.BindingProcessorManager;
-import at.gv.egiz.bku.conf.Configurator;
 

 public abstract class SpringBKUServlet extends HttpServlet {

 

+  private static final long serialVersionUID = 1L;
+
   public final static String BEAN_NAME="bindingProcessorManager";
   
-  protected static Configurator configurator; 
-  
   protected BindingProcessorManager getBindingProcessorManager() {

     return (BindingProcessorManager) getServletContext().getAttribute(BEAN_NAME);

   }
   
-  public static void setConfigurator(Configurator conf) {
-    configurator = conf;
-  }

 }