Questions tagged [session-management]

Use tag when there are questions specific to session management in any domain (web, mobile, etc)

As per introduction of a Session:

Session management is the technique used by the web developer to make the stateless HTTP protocol support session state by making use of session variables.

For example, once a user has been authenticated to the web server, the user's next HTTP request (GET or POST) should not cause the web server to ask for the user's account and password again.

298 questions
4
votes
1 answer

What criteria must be true to create a new session when Spring Security's IF_REQUIRED session creation policy is used?

Spring Security's API Documentation for SessionCreationPolicy says the following for the IF_REQUIRED property, which I believe is the default: Spring Security will only create an HttpSession if required And that's all it has to say about that. But…
Matt
  • 23,363
  • 39
  • 111
  • 152
4
votes
2 answers

Why doesn't FB.login delete the logout cookie?

I have a problem with Facebook authentication logic: On home page load, I call getLoginStatus() and if I get "connected", I redirect the user to his account page. If not, the user can click the login button that calls FB.login(). If the user is…
4
votes
3 answers

session management in web services?

is it possible to manage sessions in web-services? if yes, how to manage session in it? is it similar to sessions we maintain in JSP or PHP? where does the info about the session will be stored, Client or Server?
brainless
  • 5,698
  • 16
  • 59
  • 82
4
votes
1 answer

Register new undertow SessionManager

I have wildfly 8.1 server running. I have my own SessionManager implementing io.undertow.server.session.SessionManager. And i want to configure the system to use my session manager. Where and how should i configure/add new settings for my session…
Nem
  • 336
  • 3
  • 8
  • 22
3
votes
0 answers

Spring Boot exclude URL to prevent maitaining the session timeout

I've got Spring Boot based server side application with Frontend build in Angular. After user login, on frontend side I have scheduled method which sends request to backend to refresh the data in table. It's sent every 10 seconds. I do not want…
3
votes
2 answers

can I discover another users LTPA2 token on the machine / in the browser?

If you put sit Paros on the traffic between your browser and a web application being hosted in WebSphere, you will have two session identifiers passed as part of the cookie section of the HTTP request: A JSESSIONID. This is your HTTPSession ID as…
Fintan
  • 71
  • 1
  • 7
3
votes
2 answers

Difference between java bean and session for session management in jsp

When managing the user session in jsp, we sometime use sessions by setting varialble using session.setAttribute() and on the otherhand we can create java bean object(setting scope to session) to store user information and can retrive it on another…
user811471
  • 31
  • 1
  • 2
3
votes
1 answer

Unable to resolve NULL driver for [Illuminate\Session\SessionManager]

I am using Laravel 5.7. My application is working fine last night. but suddenly this error appears. I did not change any file. Now I am searching for a solution but I did not find any. I am new on laravel I am not familiar with core files of…
3
votes
3 answers

How to configure a maximum duration of an application session in Tomcat?

I need to configure a maximum duration of an application session in Tomcat to 24 hours. I was not able to find the appropriate configuration in the documentation: https://tomcat.apache.org/tomcat-8.5-doc/config/http.html (There is sessionTimeout for…
Michael
  • 10,063
  • 18
  • 65
  • 104
3
votes
2 answers

How and where to store nhibernate session in winforms per request

Background I've read all kinds of blogs and documentation about nhibernate session management. My issue, is I need it for both winforms and webforms. That's right, I'm using the same data layer in both a winforms (windows .exe) and webforms…
goku_da_master
  • 4,257
  • 1
  • 41
  • 43
3
votes
0 answers

Session Management For Multiple Server

I want to move data with session using asp.net . I want to explain my question with scenario. I have four layers in my application. When I login my portal with user password I create session for username and userid. for example,I have three servers…
Demster
  • 124
  • 3
  • 5
3
votes
3 answers

How to setup session and CSRF protection in Plug?

I'm currently learning Elixir by trying to make a small Plug project. Most of it goes fine except for sessions and CSRF protection. When I make GET requests, I see no session cookies in Firefox or HTTPie, and when I make POST requests, I get a 500…
art-solopov
  • 4,289
  • 3
  • 25
  • 44
3
votes
1 answer

springmvc validate httpsession containing userobject

I need to validate HttpSession (for Spring MVC Application) in a better way for my current Project. Here is the Scenario: 1) Once user is successfully validated, userObject object is added to httpSession class HttpSession session =…
Ankit
  • 2,126
  • 4
  • 33
  • 53
3
votes
2 answers

Asp.net session management in load balance environment

Any recommendations for transition from single server to load balancing environment of 3 servers? I considered using Sql Server session management, but I am storing linq2sql objects in session which has serialization issues. With a quick search I…
Syam
  • 1,629
  • 1
  • 20
  • 32
3
votes
0 answers

Struts2 Session cluster - Issue with non serialized object - when TokenSessionInterceptor is used(2.3.16) version

I am trying to configure, Session clustering for one of my struts2 based application, but it fails if I use TokenSessionInterceptor in application. Following error is observed in logs when session persistence is in…
1 2
3
19 20