• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag
 

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: Session Strangeness on 2nd Login
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Session Strangeness on 2nd Login


  • Subject: Re: Session Strangeness on 2nd Login
  • From: Drew Thoeni <email@hidden>
  • Date: Sat, 26 Aug 2006 15:08:29 -0400

Nope. Session is not stored in cookies (no cookies implemented in this application).

At first, I thought it was the session not terminating properly. And that was the case. I pulled some code from the logout screen and now the session is properly terminated.

The odd thing is these new sessions that are generated by the user attempting to sign in (with a clean URL, that is no session info in the URL) all get new and different session IDs in the response URL. So the application seems to be saying "here's a new URL and, BTW, it's timed out."

Drew


On Aug 26, 2006, at 2:12 PM, Chuck Hill wrote:

You are storing the session ID in cookies, right? Sounds like your logout is not resulting in this cookie being removed.

Chuck

On Aug 26, 2006, at 4:54 AM, Drew Thoeni wrote:

In my application, a user logs out and the session is terminated properly. (This confirmed through JavaMonitor.)

The user then goes back to the log in page by _retyping_ the simple URL (www.domianname.com, which redirects to the webobjects app) and clicks login.

The user will, on occasion, be sent to the same instance and receive the session timeout page. The URL will include a new session ID and a new session will be created (as seen in JavaMonitor).

The user can again type the simple URL and can then again get the same instance, a different session ID and the session timeout page.

Only when the user gets the alternative instance will the user get the main page.

Any ideas why WO would be returning a new session but thinking the session is actually timed out? WOSessionTimeOut is set to 3600.

Regards,

Drew

_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
40global-village.net


This email sent to email@hidden

--

Practical WebObjects - for developers who want to increase their overall knowledge of WebObjects or who are trying to solve specific problems. http://www.global-village.net/products/ practical_webobjects







_______________________________________________ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (email@hidden) Help/Unsubscribe/Update your Subscription: This email sent to email@hidden
  • Follow-Ups:
    • Re: Session Strangeness on 2nd Login
      • From: Chuck Hill <email@hidden>
References: 
 >Session Strangeness on 2nd Login (From: Drew Thoeni <email@hidden>)
 >Re: Session Strangeness on 2nd Login (From: Chuck Hill <email@hidden>)

  • Prev by Date: Re: Looks like ThinkSecret got some of the scoop on WO from WWDC'06
  • Next by Date: Re: Looks like ThinkSecret got some of the scoop on WO from WWDC'06
  • Previous by thread: Re: Session Strangeness on 2nd Login
  • Next by thread: Re: Session Strangeness on 2nd Login
  • Index(es):
    • Date
    • Thread