Stack Overflow
Stack Overflow

Questions tagged [jsessionid]

JSESSIONID is the name of the tracking parameter defined by the Java servlet API.

JSESSIONID is the name of the tracking parameter defined by the Java servlet API. The parameter can either be set as a cookie or as part of the url.
If a request specifies a JSESSIONID, the server will use it if it determines if it is valid. If the JSESSIONID in the request is missing or invalid, the server generates a new unique one.
Sessions can be configured to time out (usually 30 minutes) after which time the session id is no longer valid.

Related tags:

461 questions
7
votes
1 answer

Is jSessionId really unique?

To put some context, i'm developing an API to track user actions on the site (anon users too). So far, we use jsessionId to identify each user and his actions. That API, now runs on Tomcat and JBoss. The really matter question is, since we analize…
Samuel García
  • 2,199
  • 14
  • 21
7
votes
2 answers

Only Cookie JSESSIONID set from first Login request is not sent in subsequent requests?

I am not able to understand what's going on. On one of the env. of my webapp (written using ExtJS 4.0) - I see the login request successfully completes but subsequent request fails with 401. When digged a bit more I found in Browser(F12) that 1st…
akjain
  • 1,787
  • 3
  • 20
  • 35
7
votes
2 answers

JBoss 7 appends JSESSIONID to URL despite tracking-mode cookie

Yes, this is another "JSESSIONID in URL" question, but I haven't been able to find an answer. I'm running JBoss AS 7.1.1 Final and this is my web.xml:
Morten Jacobsen
  • 986
  • 1
  • 11
  • 31
7
votes
2 answers

Where is JSESSIONID stored? (JavaEE)

I have two applications - A Java EE web application and a Java SE applet. I want to authenticate a user in the applet by means of a JSESSIONID (which is created by the web application). So there is a problem - how to associate this JSESSIONID with…
marxin
  • 3,692
  • 3
  • 31
  • 44
6
votes
1 answer

Chrome and JSESSIONID

Following problem with chrome...: I've running an Grails 1.3.7 Application on a Server. I've noticed, when I request a static content (such as non-dynamic html-files) from Chrome, Chrome creates two JSESSIONID-Cookies. The first one when the…
Beastcraft
  • 375
  • 1
  • 6
  • 16
6
votes
1 answer

How to do zero-downtime rolling updates for app with (long-lived) sticky sessions using containers

Am trying to figure out how to provide zero-downtime rolling updates of a webapp that has long-lived interactive user sessions that should be sticky, based on a JSESSIONID cookie. For this (and other) reasons I'm looking at container technology,…
Paul
  • 335
  • 1
  • 3
  • 16
6
votes
0 answers

Spring Boot JSESSIONID secure flag not set over HTTPS

We have build a Cloud Foundry app using Liberty for Java. When testing the app we found that the SSL cookie did not have the secure flag set. Issue: The JSESSIONID did not have the Secure flag set while the _VCAP_ID had the Secure flag set We have…
user1982350
  • 2,441
  • 2
  • 14
  • 11
6
votes
2 answers

How to generate custom JSESSIONID, based on some hash of user's data in order to replicate session

Is it possible to override Tomcat's embedded generator of JSESSIONID, to be able to create custom values of this cookie, based on user's login? Why do I need this: I have a load balancer with "sticky sessions", configured to route requests with the…
Illarion Kovalchuk
  • 5,774
  • 8
  • 42
  • 54
6
votes
3 answers

multiple stateful iframes per page will overwrite JSESSIONID?

Looking for someone to either confirm or refute my theory that deploying two iframes pointing to two different stateful pages on the same domain can lead to JSESSIONIDs being overwritten. Here's what I mean: Setup suppose you have two pages that…
Nikita
  • 6,019
  • 8
  • 45
  • 54
6
votes
3 answers

How do I retrieve the jsessionid from URL in JSP?

I know how to pass the jsessionid to the URL. I encode the url, which will look like this: mysite.com;jsessionid=0123456789ABCDEF (http) Does there exist a built-in method to retrieve the jsessionid from the URL, using Java? I found this method…
user717236
  • 4,959
  • 19
  • 66
  • 102
6
votes
3 answers

Forcing HttpOnly cookies with JRun/ColdFusion

We need to ensure that all cookies on a CF7 site are set as HttpOnly. We are using jsessionid to control our sessions, and JRun does not create this as HttpOnly. Whilst it is possible to modify an existing cookie to add this setting, we need to have…
Peter Boughton
  • 110,170
  • 32
  • 120
  • 176
5
votes
2 answers

JQuery jsession cookie is not sent to a server

I've searched jquery forum, stackoverflow, google, bing, and even yahoo w/o success. Every 10 sec I'm trying to load a text data from logservlet servlet via this JQuery snippet: