Questions tagged [session-management]

Use tag when there are questions specific to session management in any domain (web, mobile, etc)

As per introduction of a Session:

Session management is the technique used by the web developer to make the stateless HTTP protocol support session state by making use of session variables.

For example, once a user has been authenticated to the web server, the user's next HTTP request (GET or POST) should not cause the web server to ask for the user's account and password again.

298 questions
24
votes
1 answer

What's the difference between the different Magento session types

I looking for some information about the difference of the different session types available in Magento. There's a core session, a customer session and a checkout session. But I'm not quite sure when to use which one and how they might behave…
Flo
  • 27,355
  • 15
  • 87
  • 125
23
votes
9 answers

Wordpress session management

I'm putting up a site using Wordpress and I'd like to piggyback on its sessions. But I'm not finding any plugins, or even documentation. Any suggestions or references before I start hacking it? Note: I'm asking about if and how WP uses standard PHP…
dkretz
  • 37,399
  • 13
  • 80
  • 138
17
votes
2 answers

Spring Security: Redirect to invalid-session-url instead of logout-success-url on successful logout

I have implemented a login-logout system with Spring Security 3.0.2, everything is fine but for this one thing: after I added a session-management tag with invalid-session-url attribute, on logout Spring would always redirect me on the…
Alessandro
  • 601
  • 3
  • 11
  • 26
15
votes
1 answer

Spring + Hibernate session management across multiple threads

I am building a system, where each request from a client side spawns multiple threads on server side. Each thread then is using one or more DAOs (some DAOs can be used by more than one thread at the time). All DAOs are injected (@Autowired) to my…
Laimoncijus
  • 8,615
  • 10
  • 58
  • 81
14
votes
6 answers

What is session management in Java?

I have faced this question in my Interview as well. I do have many confusion with Session Scope & it management in java. In web.xml we do have the entry : 30 …
user284291
13
votes
2 answers

What is the best NHibernate session management approach for using in a multithread windows service application?

I have a windows service application that work with multithread. I use NHibernate in data access layer of this application. What is your suggestion for session management in this application. I read about UNHAddins, Is it a good solution?
masoud ramezani
  • 22,228
  • 29
  • 98
  • 151
13
votes
5 answers

Storing user session variables in file vs in database

I've got a php application and I'm saving the session variables for the user using $_SESSION itself. Is there any particular advantage of storing it in a database? I'm looking for a reliable / well-researched article which talks more about this. I…
Alan Beats
  • 289
  • 1
  • 2
  • 9
12
votes
3 answers

Session Management in MVC

I am new in MVC. I am creating new WebApplication in MVC4 Razor. I want to maintain User Login session for all pages. Can any one Explain me how to maintain session for all views in MVC with small example.
SanketS
  • 963
  • 1
  • 13
  • 36
12
votes
1 answer

memcached-session-manager on AWS

I've got a website running on Amazon Web Services that is deployed using Elastic Beanstalk and runs on a minimum of 2 EC2 micro instances. An auto scaling policy is in place, so that it can scale up and scale down depending on the the traffic in the…
9
votes
1 answer

custom state management for Java EE

I've worked with Java EE (now Jakarta EE) since before it was named "EE" (i.e. servlets, etc.) but the last time I was deeply into session management was over 15 years ago. Now we have new technologies and trends such as the HTML5 Web Storage API…
8
votes
1 answer

Is it possible to expire or delete a specific session in ColdFusion, other than the one for that request?

Important: I do not mean ending the session associated with the current request. I mean, given some identifier, is it possible to clear out that session? I'd like to implement Single Sign Out. As part of that, it would be convenient if on logout, I…
Jordan Reiter
  • 20,467
  • 11
  • 95
  • 161
7
votes
1 answer

Managing session in REST application after authentication with OpenID

I am building an RESTful application. I plan to use OpenID for user authentication. Currently, I am using LightOpenID for OpenID authentication and I am able to authenticate my users. My question is what next? after authentication! Since, its a…
Abdel Raoof Olakara
  • 19,223
  • 11
  • 88
  • 133
7
votes
1 answer

Centralize session management to other Springboot applications

I have some applications with Spring Boot, Spring Security, Spring Sessions and Spring Redis. One of my applications (I will call it "Permissions") is responsible for providing a login service to all my other applications. This is already working…
7
votes
2 answers

How do I structure my Perl CGI program?

We just got our first major Perl CGI assignment in my CS class. Our task is to create an mp3 sharing site that allows users to create accounts, log in, share mp3's. Statistics must be shown of current users, mp3's available, etc. All actions must…
cb.
  • 290
  • 1
  • 5
  • 14
7
votes
2 answers

Using HTTP Digest Authentication on the iPhone

I have an app that communicates with a server that uses HTTP Digest authentication. It seems to me that the 'session' management within the iPhone is pretty "black box" to us developers. Is it true that we can't see how the framework handles /…
Jasarien
  • 58,279
  • 31
  • 157
  • 188
1
2 3
19 20