Questions tagged [session-management]

Use tag when there are questions specific to session management in any domain (web, mobile, etc)

As per introduction of a Session:

Session management is the technique used by the web developer to make the stateless HTTP protocol support session state by making use of session variables.

For example, once a user has been authenticated to the web server, the user's next HTTP request (GET or POST) should not cause the web server to ask for the user's account and password again.

298 questions
1
vote
1 answer

How to reinitialize session in Hibernate with thread context?

Note: This question is related for my previous one. I am using hibernate.current_session_context_class=thread in my Hibernate configuration and getting Hibernate sessions via SessionFactory.getCurrentSession() as needed. So it does create or give me…
Laimoncijus
  • 8,615
  • 10
  • 58
  • 81
0
votes
1 answer

Cookie handling in subsequent requests in same page

I'm creating my own (multi threaded) ISAPI based website in C++ and I'm trying to implement correct session management. The problem is that when a new session should be created, the session is created twice when using subsequent requests in the…
scippie
  • 2,011
  • 1
  • 26
  • 42
0
votes
0 answers

How can I attach to an existing and ongoing session by selenium webdriver using executor_url and session_id in another python file?

To clarify: I am a total newcomer in stackoverflow and Python programming so the question might not be that specific. My intention is to use one python file to log in and stay as it is, the other python file will commit itself to try and error for…
0
votes
0 answers

How to correctly handle the save-yourself callback on the client side - XSMP?

I want to register the client on the session manager and handle the save-yourself callback when a user logs out from the session. The session manager should request all registered clients to call the save-yourself callback - what is incorrect with…
XoDefender
  • 33
  • 6
0
votes
0 answers

How to control a session creation within java servlet?

I make a few requests from a client-side of web application, which are received by servlet. Here is a code piece in doPost method of my MainServlet: String requestData = req.getReader().lines().collect(Collectors.joining()); HttpSession session =…
XterS
  • 11
  • 3
0
votes
0 answers

Ensure 1 session per user for multiple instance BE in Springboot using Redis

I have spring boot application that runs in 4 instances. I used 1 Redis as centralized session management. Currently, the session was successfully stored in Redis. In my custom WebSecurityConfigurerAdapter I set the following by overriding configure…
Tobi
  • 171
  • 8
0
votes
3 answers

Session Handling without Cookies and URL rewriting

I have an old web site(servlets, JSP, and Struts). Currently, session management handled by using cookies. I wanted to redesign this site to make browser independent. I know there is an alternate - URL re-writing, however, this is not feasible for…
Lokesh
  • 1,144
  • 1
  • 10
  • 18
0
votes
1 answer

duende identity server 6.2 session managment

I had indetity server4 and I had to add session management. I upgrated the application version to duende identityserver 6.2. And created a database based on PersistedGrantDbContext and ConfigurationDbContext. enter image description here my database…
0
votes
0 answers

SAML2.0 SP Initiated Single Logout from SP to Okta IDP not redirecting to SP SLO URL

I am trying to implement SAML2 authentication in my java web app. When trying to login and logout from SP things are working as expected. In a particular use case, when session on okta is terminated and after that logout request is sent to okta from…
0
votes
0 answers

how to fetch Session from spring data redis by session Id?

I have a service method which will save user data as session data into the spring data redis. Then this generates JWT with session ID. Suppose I am calling another microservice which has filter where do validation of the JWT and want to validate the…
0
votes
0 answers

I am developing an android app with multiple users. How to mantain session each time different user logged into the system?

2 types of users in one app (let's say, admin and client). Would like to make session management like in PHP. How can I do that in the android app? 2 users as clients logged into the app, so are there any ways to maintain session for these users?
0
votes
1 answer

Nodejs and socket.io Session Management

I created a Realtime application. It will store lot's of data in locally once node will crash all data lost. how to carry these data and rejoin all the clients in same session or same room. Please let me know. libraries are, Socket.io,(version…
0
votes
1 answer

Is there an equivalent of DynamoDB on Azure as a PHP session Handler

Is there a equivalent of DynamoDB on Azure as a PHP session Handler? I found some very old articles online suggesting to use Azure Table Storage but it doesn't seem to work anymore. (https://dzone.com/articles/handling-php-sessions-windows). Thank…
user2335065
  • 2,337
  • 3
  • 31
  • 54
0
votes
2 answers

Session Management and Security

This is my current session management: if(!isset($_SESSION["user"]["authenticated"]) || !$_SESSION["user"]["authenticated"]) redirect("login.php"); if($_SESSION["user"]["browserHash"] != md5($_SERVER["HTTP_USER_AGENT"])) …
Rolando Cruz
  • 2,834
  • 1
  • 16
  • 24
0
votes
0 answers

User sessions overlap in Spring MVC with Auth0 integration

I am facing an issue with user sessions in Spring MVC java web app. User sessions are overlapped Ex: Here we have 2 completely different users using different browsers, john@yahoo.com is using Chrome and sara@yahoo.com is using Edge. The behavior…