Questions tagged [session-management]

Use tag when there are questions specific to session management in any domain (web, mobile, etc)

As per introduction of a Session:

Session management is the technique used by the web developer to make the stateless HTTP protocol support session state by making use of session variables.

For example, once a user has been authenticated to the web server, the user's next HTTP request (GET or POST) should not cause the web server to ask for the user's account and password again.

298 questions
0
votes
2 answers

How does session managment work in spring?

I can't really understand the concept of this. Take a look what I have: @PostMapping("/login") public ModelAndView login( @ModelAttribute UserLoginDTO userDto, HttpSession session) { if (authenticateService.loginCheck(userDto.getUsername(),…
Andrew
  • 95
  • 2
  • 12
0
votes
1 answer

What is the best practice for multi-channel session management without checking database every time?

I am trying to implement multi-channel session management. What I mean for multi-channel is that user may login from mobile or from internet or from different channel. I do not want them to login from different channels at the same time. For…
ahmet gül
  • 193
  • 1
  • 11
0
votes
0 answers

java web application multiple instance redis session

we have an application which is running on 4 tomcat servers.I would like Redis for session management so that when one of them is down the user should not be facing any problem. I was successfully able to persist the session in redis and was also…
venkata
  • 1
  • 1
0
votes
0 answers

How to clear open connections in HPQC made by the ALM 12.5x REST API?

Currently I'm signing in to HPQC using this ALM REST endpoint: POST /qcbin/api/authentication/sign-in But when I hit these logout endpoints, my tokens/cookies becomes invalid which is good, BUT the connections made by my API requests do not get…
Akyuna Akish
  • 147
  • 1
  • 7
0
votes
1 answer

Need user to login again once user Session gets End

Hi My problem is I need to redirect to the login page again when the user session gets end. and I want user to login again but when I refresh the page after session timeout gets completed it opens automatically logged in user without asking for…
Amar Srivastava
  • 373
  • 3
  • 10
0
votes
1 answer

how to share session data between two angular 2 application

I have two angular apps App1 and App2. I want to share App1 session data to App2. The reference, like google we can access all google apps with a single login.
0
votes
2 answers

Tomcat disable / destroy or reuse session creation for specific requests

Background I am using Tomcat to serve a .jsp page that can be called by a load-balancer to determine if a given server hosting an application is online and able to service requests. The .jsp simply makes a request to the given application and to see…
The_Neo
  • 308
  • 1
  • 4
  • 13
0
votes
1 answer

Deleting a JWT when it's not in use?

I am new to the full stack world, so I hope that my question is not too basic.. I have a JWT tokens that saved in MongoDB, as a field in the user document. Let's take scenario when the user deletes his browsing data and the JWT in his side is…
Dan Monero
  • 417
  • 5
  • 12
0
votes
0 answers

How to get JSESSIONID value on the first request? (coldfusion)

How to get JSESSIONID value on the first request? I spend four days on internet googling without resolving the problem Any help will be appreciated Thank you
0
votes
2 answers

Can i just use 2 Redis/Sentinal servers to manage failover on my 2 server setup?

I forgive me for my shallow knowledge, but I have not to figure out why I need 3 servers to manage fail-over with Redis? I have a application served under load-balancer with to server instances, and I am looking to setup Redis for session &…
Aditya T
  • 1,566
  • 2
  • 13
  • 26
0
votes
1 answer

get logged users spring

I want to retrieve the currently logged in users by leveraging spring's SessionRegistry. I have defined the bean and applied it to the session management as shown below: @Override protected void configure(final HttpSecurity http) throws Exception { …
akanzari
  • 77
  • 1
  • 1
  • 7
0
votes
1 answer

How to enable Wildfly 10 InMemorySessionManager?

I'm using Widlfy 10, but do not want to use the DistributableSessions that are used by Wildfly out of the box (I am having some session handling issues and need to debug things at a basic level). I see that Undertow has an InMemorySessionManager…
Eric B.
  • 23,425
  • 50
  • 169
  • 316
0
votes
1 answer

PHP creates two different Sessions

i am work on a project and use php sessions to store some informations. In one script i start the session with session_start() and create some $_SESSION['var']s. In another script i want to get this variables, but there will create a…
0
votes
1 answer

Infinite session using Electron framework

We are building a desktop client(using Electron framework) which will communicate with a remote server via REST API. We want our desktop client to be in the logged-in state for an infinite time. I am aware of this fact that credentials of user need…
deeini
  • 75
  • 2
  • 10
0
votes
1 answer

Limit the total amount of sessions in a Sprint Boot application

In our Spring Boot web server, I know how to limit the sessions per user (httpSecurity.sessionManagement().maximumSessions()), but I want to limit the total amount of sessions, to avoid load on the server. How can this be done?
splintor
  • 9,924
  • 6
  • 74
  • 89