Re: Session Strangeness on 2nd Login
Re: Session Strangeness on 2nd Login
- Subject: Re: Session Strangeness on 2nd Login
- From: Chuck Hill <email@hidden>
- Date: Mon, 28 Aug 2006 10:44:23 -0700
Check the URL, log it in dispatchRequest() in Application. Also log
the headers. The answer is in there somewhere. Do they get a login
page before they get the session time out page?
Chuck
On Aug 26, 2006, at 12:08 PM, Drew Thoeni wrote:
Nope. Session is not stored in cookies (no cookies implemented in
this application).
At first, I thought it was the session not terminating properly.
And that was the case. I pulled some code from the logout screen
and now the session is properly terminated.
The odd thing is these new sessions that are generated by the user
attempting to sign in (with a clean URL, that is no session info in
the URL) all get new and different session IDs in the response URL.
So the application seems to be saying "here's a new URL and, BTW,
it's timed out."
Drew
On Aug 26, 2006, at 2:12 PM, Chuck Hill wrote:
You are storing the session ID in cookies, right? Sounds like
your logout is not resulting in this cookie being removed.
Chuck
On Aug 26, 2006, at 4:54 AM, Drew Thoeni wrote:
In my application, a user logs out and the session is terminated
properly. (This confirmed through JavaMonitor.)
The user then goes back to the log in page by _retyping_ the
simple URL (www.domianname.com, which redirects to the webobjects
app) and clicks login.
The user will, on occasion, be sent to the same instance and
receive the session timeout page. The URL will include a new
session ID and a new session will be created (as seen in
JavaMonitor).
The user can again type the simple URL and can then again get the
same instance, a different session ID and the session timeout page.
Only when the user gets the alternative instance will the user
get the main page.
Any ideas why WO would be returning a new session but thinking
the session is actually timed out? WOSessionTimeOut is set to 3600.
Regards,
Drew
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
40global-village.net
This email sent to email@hidden
--
Practical WebObjects - for developers who want to increase their
overall knowledge of WebObjects or who are trying to solve
specific problems. http://www.global-village.net/products/
practical_webobjects
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
40global-village.net
This email sent to email@hidden
--
Practical WebObjects - for developers who want to increase their
overall knowledge of WebObjects or who are trying to solve specific
problems. http://www.global-village.net/products/practical_webobjects
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden