Questions tagged [session-management]

Use tag when there are questions specific to session management in any domain (web, mobile, etc)

As per introduction of a Session:

Session management is the technique used by the web developer to make the stateless HTTP protocol support session state by making use of session variables.

For example, once a user has been authenticated to the web server, the user's next HTTP request (GET or POST) should not cause the web server to ask for the user's account and password again.

298 questions
1
vote
1 answer

Why differrent session ids are generated after logging out from multiple tabs?

I am using Spring security in my application. I just came across one very specific issue. When I am using multiple tabs and if I log out from all the tabs sequentially. Each page has new sessionid values (fiddler shows new session id for each login…
Amit
  • 13,134
  • 17
  • 77
  • 148
1
vote
1 answer

GWT- History Management for web application

I am working on History management for my application. I have two views, one is login and the other is main application. I have added local links #login and #application. Now ideally what should happen is, when the user opens the application he…
1
vote
1 answer

vertx authentication and session management

I am using Vert.x in backend and AngularJS for my frontend. Vert.x server receives HTTP actions using both POST and GET methods. Somehow I am getting different session ids for each request. Following is the code snippet from my LoginFormHandler…
Sumit
  • 11
  • 1
  • 2
1
vote
0 answers

How to get the session details from sql server database

I have one Solution which has different projects like ASP.Net and ASP.Net MVC in this solution. When the user logs in to the application, the same credentials I need to pass to the other project in same solution. It should not ask…
1
vote
3 answers

Cannot open database "ASPState" requested by the login. The login failed. Login failed for user 'xxxx'

I am working on one project which is in Asp.Net web form and Sql server. When I run application I get the error Unable to connect Sql Server Session Database and inner exception is Cannot open database ASPState requested by the login. I did some…
Gayatri
  • 559
  • 2
  • 8
  • 16
1
vote
0 answers

Spring session management SessionDestroyedEvent not thrown

I have a customized RegisterSessionAuthenticationStrategy and Im using CompositeSessionAuthenticationStrategy with exceptionIfMaximumExceeded = false. I have the following scenario: login on browser #1 login on browser #2 I want that the first…
lior
  • 1,127
  • 3
  • 24
  • 43
1
vote
2 answers

I want to figure out how cookies/ session variables interact to validate a user session

---I have been experimenting on cookies/ session ids and have a little trouble digesting in the concepts. I'm working on a Debian distro. Using Burp to capture/alter requests/ responses. What I know is below. a. Cookies get stored in the client…
1
vote
2 answers

Session timeout in mvc application

How should I use the tag in the web.config in my MVC4 application, framework 4.0? I added it in the web config like this: but it didn't time out. Also I can't understand for certain what it means if I set…
dillci
  • 65
  • 2
  • 10
1
vote
2 answers

Browser specific session management

Let me explain my scenario, I have created a spring web application and deployed on tomcat. Then I opened a chrome browser and launched the application. It run successfully. Then again I have opened a new Browser lets say IE/Firefox. Then again I…
1
vote
1 answer

Usage of Memory in Java bean and session variables

I am using tomcat Apache server for my web app. I need to know if using bean would reduce my memory usage than the session variables i use ? Also what is the limit of storing session variables in bytes and that of a bean.
1
vote
0 answers

Remember Me, Single Session and Encrypt Cookie with HTTP (Not HTTPS)

Using "Spring-Security". I have a scenario like the "Remember Me, Single Session (Only one session will be created per user, by setting session-fixation-protection="migrateSession") and Encrypt Cookie with HTTP (Not HTTPS)" should be implemented in…
1
vote
1 answer

Spring Security Custom Session management and Remember me not working

I have configured custom session management like : And remember me like…
user3515080
  • 545
  • 2
  • 6
  • 17
1
vote
4 answers

Pitfall of storing dataTable(10,000 rows) in a session variable?

Consider my dataTable contains 10,000 rows and i want to know the pitfall of storing datatable in a session variable... I want to use it until a new row has been added... What type of session mode should i use?
ACP
  • 34,682
  • 100
  • 231
  • 371
1
vote
0 answers

Differentiate between session timeout and spring concurrency-control max sessions

I'm extending HttpSessionEventPublisher and i want in my sessionDestroyed() method to differentiate between sessions that were timed out and ones that closed because of concurrency-control max sessions. Is there a flag in HttpSessionEvent or the…
lior
  • 1,127
  • 3
  • 24
  • 43
1
vote
1 answer

SessionMap vs Map which is better for Session?

Is there any advantages of using SessionMap over Map for a session in web application ? 1 advantage I found was you can invalidate a SessionMap but not Map.
Pratik Shah
  • 1,782
  • 1
  • 15
  • 33