Re: Session Question
Re: Session Question
- Subject: Re: Session Question
- From: Gerald Hanks <email@hidden>
- Date: Wed, 9 Feb 2005 01:32:04 -0700
This is exactly the problem that I am experiencing. Here is the snippet from the release notes for anyone that is interested.
--SNIP--
<x-tad-bigger>Radar #</x-tad-bigger>2274039
IDs in Cookies are dropped at the front door of applications.
Description:
When "IDs in Cookies" is turned on for a WebObjects application, and you enter that application through the default request handler, cookies with old IDs are ignored in the request. In the response, new cookies for new IDs are sent back, or, in the case when there wouldn't be any new ID needed (such as in a stateless application), cookies clearing out the old IDs are sent back. This ensures that a user gets a new session when reentering a site, even if the users’s browser keeps old, non-expired cookies around. This behavior is non-customizable.
Workaround:
Use the API <x-tad-bigger>shouldRestoreSessionOnCleanEntry(WORequest aRequest)</x-tad-bigger> on the WOApplication class to control whether cookie sessions are dropped as above.
--SNIP--
On Feb 9, 2005, at 1:21 AM, Stephane Guyot wrote:
Gerald,
the trouble with cookies is that you are dependant of the user-agent ( IE, firefox, Safari .... )
But have a look on the following API :
WOApplication :
<x-tad-bigger>public boolean </x-tad-bigger><x-tad-bigger>shouldRestoreSessionOnCleanEntry</x-tad-bigger><x-tad-bigger>(</x-tad-bigger><x-tad-bigger>WORequest</x-tad-bigger><x-tad-bigger> aRequest)
</x-tad-bigger>
<x-tad-bigger>public </x-tad-bigger><x-tad-bigger>NSMutableDictionary</x-tad-bigger><x-tad-bigger> </x-tad-bigger><x-tad-bigger>handleMalformedCookieString</x-tad-bigger><x-tad-bigger>(</x-tad-bigger><x-tad-bigger>RuntimeException</x-tad-bigger><x-tad-bigger> anException,
</x-tad-bigger><x-tad-bigger>String</x-tad-bigger><x-tad-bigger> cookieString,
</x-tad-bigger><x-tad-bigger>NSMutableDictionary</x-tad-bigger><x-tad-bigger> aReturnDict)
+ WOAcceptsMalformedCookies
</x-tad-bigger>HTH,
Stephane
Le 9 févr. 05, à 00:54, Gerald Hanks a écrit :
The return is by using /www.mydomain.com/cgi-bin/WebObjects/Test.woa including the "woa". I have verified that the cookie is set with the path of /cgi-bin/WebObjects/Test.woa so this should work. However it does not.
--gerald
On Feb 8, 2005, at 4:14 PM, Chuck Hill wrote:
Do you return by using /www.mydomain.com/cgi-bin/WebObjects/Test.woa or /www.mydomain.com/cgi-bin/WebObjects/Test (note the missing .woa). The wosid cookie is set with a path of "/cgi-bin/WebObjects/Test.woa" and will not be sent for the regular "front door" URL. Override public String domain() in Session to return "/"; to avoid this. Unless, that is, you are running multiple, cookied WOApps on the same domain. If which case you will have to find some way to differentiate them.
Chuck
On Feb 8, 2005, at 1:26 PM, Gerald Hanks wrote:
I have an application called Test that I am developing. I can access the app at http://www.mydomain.com/cgi-bin/WebObjects/Test.woa I have the application set to store session ids in cookies. I can start a session and everything works well until I leave the site and return. If I return by back tracking my session is still active. If I return using a direct action such as http://www.mydomain.com/cgi-bin/WebObjects/Test.woa/wa/default then my session is still active. If I return using the application url http://www.mydomain.com/cgi-bin/WebObjects/Test.woa then a new session is created and I lose all my session information.
Is this the way things are supposed to happen or am I doing something wrong? How can I allow users to leave my webobjects application and return without losing their sessions? My understanding was all I had to do was to store the session ids in cookies.
--gerald
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
--
Practical WebObjects - a book for intermediate WebObjects developers who want to increase their overall knowledge of WebObjects, or those who are trying to solve specific application development problems.
http://www.global-village.net/products/practical_webobjects
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden