Re: Change of HttpSession causes java.lang.IllegalStateException: HttpSession is invalid

2015-05-19 Thread Christoph Nenning
Hello, We have a struts2 project. In that project we have a security procedure in order to log in the users. As part of the login process, the session is destroyed and recreated once the user is logged in, in order to avoid Session hijacking. The problem we are having is that the

Re: Change of HttpSession causes java.lang.IllegalStateException: HttpSession is invalid

2015-05-19 Thread Christoph Nenning
Your interceptor can use the static method: ActionContext.setSession(MapString, Object session) Have a look at CreateSessionInterceptor to see how the map parameter can be created. When your own interceptor is placed before ServletConfigInterceptor in stack it will affect SessionAware.

Re: Change of HttpSession causes java.lang.IllegalStateException: HttpSession is invalid

2015-05-19 Thread JOSE L MARTINEZ-AVIAL
Hello Christoph, Apart from the issue with static access to @com.spb.mvc.util.Constants@ATRB_SESSION_USER, is there no way to update the reference to the session across the whole framework? Because we are having the same issue with SessionAware if the session is destroyed/created in one of the

Change of HttpSession causes java.lang.IllegalStateException: HttpSession is invalid

2015-05-18 Thread JOSE L MARTINEZ-AVIAL
Hello, We have a struts2 project. In that project we have a security procedure in order to log in the users. As part of the login process, the session is destroyed and recreated once the user is logged in, in order to avoid Session hijacking. The problem we are having is that the action