Questions tagged [session-management]

Use tag when there are questions specific to session management in any domain (web, mobile, etc)

As per introduction of a Session:

Session management is the technique used by the web developer to make the stateless HTTP protocol support session state by making use of session variables.

For example, once a user has been authenticated to the web server, the user's next HTTP request (GET or POST) should not cause the web server to ask for the user's account and password again.

298 questions
0
votes
1 answer

Detect Touch in Base Class

In my application i want to do a session timeout after some time of inactivity. But if the user interacts with the app the timer needs to be reset. Main concern is this should be implemented in part of the application not for the whole application,…
Shruti
  • 1,849
  • 1
  • 13
  • 21
0
votes
1 answer

How to connect or install redis for session management on digitalocean app platform?

I have deployed a Golang app on digitalocean app platform. The Go app utilizes redis for session management.Everything seems to be running smooth except when I try to login it logs an error sessions: invalid character in cookie name: which I've come…
0
votes
0 answers

Event Tracking integrity

When we are trying to implement an 'Event Tracking' mechanism (recording/logging clicks, scrolls and other actions on the UI of the web application) on our web application. Should 'Event Tracking' be tied to a session? I noticed that a lot of Event…
0
votes
0 answers

Spring session timeout to be not refreshed for a set of urls

I am using Spring Cloud Gateway with @EnableSpringWebSession functionality. The session can be configured with a max inactivity interval which when it's reach will end the session. Is there a way to black list some of the urls from marking session…
julew
  • 216
  • 3
  • 14
0
votes
0 answers

rails way of knowing if someone else is looking at a record without altering model?

So, I have to fix this issue in a working project, and the idea is to have a way for a user to archive a record. -if can?(:archive, @order_instruction) && !@order_instruction.archived? = link_to 'Cancelar',…
0
votes
1 answer

Flurl: Retry http call automatically after handling 401 response

Using Flurl, I am trying to implement an elegant solution to handle 401 responses for several APIs. I can trap HTTP exceptions using: FlurlHttp.GlobalSettings.OnError = MyFlurlErrorHandler; And then: private void MyFlurlErrorHandler(HttpCall…
0
votes
0 answers

Storing sensitive information in session

We are developing a banking app where a sensitive information field would need to be required to be stored in session. (not all sensitive info field, just one). EDIT: By session, we dont mean in a cookie. Its in the back end session attribute of the…
0
votes
0 answers

Design a session manager

Do we have a spec standard for designing a session manager? IMO, these are what a session should process: a unique id for each session should be assigned (session id); should be able to maintain attributes in the form of pairs; should be able to…
J.E.Y
  • 1,173
  • 2
  • 15
  • 37
0
votes
1 answer

azure session management using load balancer

We are planning to have a web app hosted in 2 web servers in 2 different azure regions and I am planning to use either traffic manager or Azure front door for load balancing. We want to distribute traffic based on priority so if app at one region…
0
votes
1 answer

How to Prevent Concurrent User Login with Angular + Dotnet core application?

We are working on the applications with frontend angular and backend dotnet core. We have to check during login, whether the same user has already been logged in or not..If yes, then it will intimate user like same User has already been signed…
Mathi
  • 1
  • 2
0
votes
1 answer

How to subclass concurency control in spring, and what exception is thrown?

Right now in Spring security I have this code: If someone attempts to start a concurrent session, an exception is thrown. The…
MirroredFate
  • 12,396
  • 14
  • 68
  • 100
0
votes
0 answers

concurrent session management not working while setting sessionManagement().maximumSessions(1) allowing 2 sessions per user

I want a user to login only once and i am using the below mentioned code . It is working but allowing same user to login twice(creating 2 different sessions) and then in 3rd login attempt it is giving error message.## @Override public void…
0
votes
2 answers

Getting null pointer exception while using HttpSession

I am currently learning Servlets. I am getting NullPointerException when using the code below. It is returning null value whenever getAttribute() function is called in SqServlet to fetch value in k. Can anyone please tell me where I am going wrong?…
0
votes
0 answers

How to keep alive Web Application Session by Web Service?

I have a project has two parts: Web Service(WS) and Web Client Application(CA). User creates session on CA and it has a timeout. There is not any session created on WS side. So any user can enter the system from CA, then make lots of interaction…
a.akkus
  • 73
  • 1
  • 11
0
votes
1 answer

Concurrent sessions in Magnolia cms

Magnolia CMS (5.5.6) by default allows users to have concurrent sessions (same user logged in two browsers for example). According to my security policy this is disallowed. Is that possible to turn off concurrent sessions in Magnolia? How can I do…