title: I want my Domino Servlet to get an authenticated user session
body: <p>It seems a like a pretty fundamental question, in a running Servlet hosted on Domino I want to access Domino resources that I have wisely protected using the the very fine security of IBM Notes and Domino.</p>
  
  <p>I want the Servlet to be able to read and write data to Domino whilst keeping that data from the client that called the Servlet (or xAgent) and preventing the client from writing directly.  </p>
  
  <p>I'd be happy to be able to get a session that represented the signer of the application.  I can get a session for a registered user by calling the Servlet using ?open&amp;login and signing in.  That's not practical.</p>
  
  <p>I've looked here: <a href="https://stackoverflow.com/questions/11401862/how-can-you-use-sessionassigner-in-a-java-bean-called-from-an-xpage">How can you use SessionAsSigner in a Java Bean called from an XPage?</a> where Mark Leusink (<a href="https://stackoverflow.com/users/1177870/mark-leusink">https://stackoverflow.com/users/1177870/mark-leusink</a>) implies the use of ExtLib's getCurrentSessionAsSigner() could be used.  I've tried it, having signed the whole application with a single user id and it doesn't return a session.  The answer seems to lie in the Servlet's inability to get a FacesContext object.</p>
  
  <p>This feels like the answer should be obvious but it isn't to me.  Any ideas?</p>