ansaurus

Question

How to avoid session sharing provided by IE8 programatically in java/j2ee application ?

Answer 1

A:

Hi , Try maitain the session id at client side ,whatever say, JSP's. and sent it back to the server componenet and try tracking it. Say if the session received is in progress currently at server side , then hold for some time ( say synchronized or whatever waiting mechanism ??) . I hope this kind of session issues should be solved tricky.

srinannapa 2010-06-03 07:38:31

Answer 2

+1 A:

I think the issues you describe above can be replicated on all browsers and can be better tackled server side. One approach I know of is to create a conversation id and manage the lifecycle of the conversation with a statemachine.

This allows you (and your users) to have one sesion where multiple conversations can be held concurently, which happens a lot in practice, well, at least in internal enterprise applications. The world is a more chaotic place than the business process models let show.

Peter Tillemans 2010-06-03 07:39:34

Answer 3

A:

Your best bet is probably to use a web framework which supports multiple concurrent sessions (somtimes called conversations or flows), or just avoid using the session so much and go REST. If you need to hack it on the client, you would not be able to do it from your webapp, but a custom win program or a .reg file could do it. This also means that users with other OSs and browsers will still run into the same problem.

disown 2010-06-03 07:42:02

Answer 4

A:

See guys my problem is not my application. Its working fine if i am logging in by one user, but when I am logging in by multiple user through through different user from different instances of IE8 browser my later session datas are overriding the formar one, this is b'coz both the IE browser are using same session id. Its happening because of session sharing of IE8. There is only one session is maintained for one application by how many user i am logging in doesnt matter. In fact i want to mantain on session for each user.

Like when I am logging in gmail in one browser. If i am just typing gmail on another browser, Its logging in automatically. I dont want this in my application. I should get login by another user at a time i should perform independent operation.

My application is uses Struts, Spring, Hibernate & JBoss application server.

Now tell me how I should proceed ?

Idiot 2010-06-03 13:03:01

Answer 5

A:

I did not like al the other solutions provided. The only thing I want is to provide a URL that the user can click and it gets a new session to login. There is a clear sessionAuthentication function but not a openLinkInNewSessionWindow

A work around for IE8 browser you could provide a link on the page "multiple login" and use the ugly WScript from the browser. An example:

<html>
  <head>    
    <script>
      function openNewSessionIE8NoMerge() {
        // This opens a new session window for windows with IE8, unfortually there is a Active X security warning.
        var WshShell = new ActiveXObject("WScript.Shell");
        WshShell.Run("iexplore.exe -nomerge www.gmail.com?testNewSession");
      }
    </script>
  </head>

  <a href="#" onclick="javascript:openNewSessionIE8NoMerge();">Click here for a new session IE8 (multiple sessions on the same application)</a>
</html>

Test: Save the example in sampleNewSession.html, open the file with IE8, in a new tab login in gmail, press the link in sampleNewSession. Now there is a new window and not logged in.

This will help the user, it can just click a link. The only problem is the activeX security message.

2010-07-16 23:25:45

ya its working...But this is not what my need is.

Idiot 2010-09-23 10:58:48

ya, its working...But this is not what my need is. My need is I have an web application in struts1.2. we have different groups of users. Different groups users gets different facilities. But if I am logging in 2 different browsers with two different group user, the the formergroup identity is overridden by the later group user.

Idiot 2010-09-23 11:06:22

ansaurus

tags:

views:

answers:

How to avoid session sharing provided by IE8 programatically in java/j2ee application ?

related questions