Session Fixation etc

--===============0035404852194091094==
Content-Type: multipart/alternative; boundary=047d7bf198e4fdcfd4052bd25a89

--047d7bf198e4fdcfd4052bd25a89
Content-Type: text/plain; charset=UTF-8

Hi folks,

I have a question regarding sessions in WebObjects.

I have a login direct action that accepts post requests for login. I want
to ensure I create a fresh session upon successful login, and
invalidate/ignore the session currently attached to the request (by means
of wosid).

At the moment, I am trying this in a subclass of WOContext to terminate
session:

public void terminateSession(){

    if(hasSession()){

           session().terminate();

    }

    _session = null;

}


and then obtaining a fresh session using context.session(). However, I am
getting the 'checking out two sessions in R-R loop' error.


Any suggestions are immensely appreciated.

Issam

--047d7bf198e4fdcfd4052bd25a89
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi folks,<div><br></div><div>I have a question regarding s=
essions in WebObjects.</div><div><br></div><div>I have a login direct actio=
n that accepts post requests for login. I want to ensure I create a fresh s=
ession upon successful login, and invalidate/ignore the session currently a=
ttached to the request (by means of wosid).</div><div><br></div><div>At the=
 moment, I am trying this in a subclass of WOContext to terminate session:<=
/div><div><br></div><div>







<p class=3D""><span class=3D"">public</span> <span class=3D"">void</span> t=
erminateSession(){</p>
<p class=3D""><span class=3D""></span><span class=3D""></span><span class=
=3D"">=C2=A0 =C2=A0 if</span>(hasSession()){</p>
<p class=3D""><span class=3D""></span><span class=3D""></span><span class=
=3D""></span>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0session().terminate()=
;</p>
<p class=3D""><span class=3D""></span><span class=3D""></span>=C2=A0 =C2=A0=
 }</p>
<p class=3D""><span class=3D""><span class=3D""></span><span class=3D""></s=
pan></span>=C2=A0 =C2=A0 _session<span class=3D""> =3D </span><span class=
=3D"">null</span><span class=3D"">;</span></p>
<p class=3D""><span class=3D"">	</span>}</p><p class=3D""><br></p><p class=
=3D"">and then obtaining a fresh session using context.session(). However, =
I am getting the &#39;checking out two sessions in R-R loop&#39; error.</p>=
<p class=3D""><br></p><p class=3D"">Any suggestions are immensely appreciat=
ed.</p><p class=3D"">Issam</p></div></div>

--047d7bf198e4fdcfd4052bd25a89--


--===============0035404852194091094==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
--===============0035404852194091094==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Wonder-disc mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/wonder-disc

--===============0035404852194091094==--