Friday, May 24, 2013

RequestFactory Session timeout

Hello,
i'm having a problem when using RequestFactory and resetting the session timeout.
Here is what i have:
- GWT + GWTP Projekt
- A separate GWT Projekt for RequestFactory Service
- All running on JBoss 6.1.0 Final
- I'm also using JAAS and SSO Valve (didn't get it to work without SSO, i think its needed because i'm using multiple gwt projects)

In the entry point method of my main project im doing this:

ginjector.getRequestFactory().initialize(ginjector.getEventBus(),  new DelegatingRequestTransport());

DelegationRequestTransport is a class in my requestFactory service project:

public class DelegatingRequestTransport extends DefaultRequestTransport {

    public static final String REQUEST_PATH =
            "/<myRequestFactoryProject>/gwtRequest";
   
    public DelegatingRequestTransport() {
        String host = Window.Location.getHost();
        String prot = Window.Location.getProtocol();
       
        super.setRequestUrl(prot + "//" + host + REQUEST_PATH);
    }
}


I have one JSESSIONID cookie, a JSESSIONIDSSO cookie and the xsrf security cookie.
All cookies are sent on a gwt rpc call, but when using requestfactory JSESSIONID is missing.
I also tried to set the cookie path for session cookie in the web.xml on main project to root "/".
Now the JSESSIONID cookie is sent when using requestfactory, but the session timeout is not reset.

How is the session managed on JBoss? I think there is a sessionManager in the jboss web-server. But how
is a cookie identified, just with the id or also with cookie path?
The SSO cookie is just needed to transfer principal information right? JSESSIONID is for session information for
every webapp, when one webapp times out, you also have to relogin for the other webapps?

So how do i reset the session timeout for my main project when using a separate gwt project with requestFactory?

--
You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To post to this group, send email to google-web-toolkit@googlegroups.com.
Visit this group at http://groups.google.com/group/google-web-toolkit?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

No comments:

Post a Comment