To my knowledge, you can't use CF's session tracking with web services. You have to roll your own, based on some kind of sessionID (which has nothing to do with a CF or J2EE session). So the web service calls the authentiate method, and is assigned a sessionID. They pass it back with all subsequent invocations.
WIthin your code, you have to track which session IDs are valid, and any per-session state. The easiest way is to use a DB table that has sessionID as the primary key, a lastVisit datetime for timeing out sessions, and then a CLOB field for storing a WDDX packet of per-session data. Obviously you can't store CFCs this way, because they don't serialize, but other complex data is fine. WHen a method call is recieved, check the sessionID to make sure it exists, then compare the lastVisit to now() to determine if the session has timed out, and then proceed to do the method call, if everything is valid. cheers, barneyb On Thu, 14 Oct 2004 15:06:55 -0400, Jeffry Houser <[EMAIL PROTECTED]> wrote: > At 01:58 PM 10/14/2004, you wrote: > >Web services work the same way as flash remoting in terms of setting > >up your facades. > > Okay, how do I do it? > I have been unable to set session variables in 1 Web Service call and > access them in a second. > > > >I suppose you could call what I described an 'application facade', > >though I'd call it a 'web serivces facade'. > > I had said "application" facade, because you said you'd use the > application scope to store the "business Logic CFC", which would mean no > individual session data. > > > >The facade is to allow > >access to your application via web services or flash remoting, it has > >nothing to do with how the operation is implemented. > > I want to know how to implement it. > > > >If you've got a really complex app with a lot of different business > >operations that need to be exposed, then breaking them down into > >multiple facades makes sense, but in general, i'd just keep them all > >in one place. > > The original plan was 1 "Web Service" CFC, with only a handful of > functions. We weren't building a GUI front end, just the Web Service > access so that some of my client's clients could perform some functions on > our backend. My original post about "Maintaining sessions between web > service calls" is below: -- Barney Boisvert [EMAIL PROTECTED] 360.319.6145 http://www.barneyb.com I currently have 4 GMail invites for the taking ---------------------------------------------------------- You are subscribed to cfcdev. To unsubscribe, send an email to [EMAIL PROTECTED] with the words 'unsubscribe cfcdev' in the message of the email. CFCDev is run by CFCZone (www.cfczone.org) and supported by Mindtool, Corporation (www.mindtool.com). An archive of the CFCDev list is available at www.mail-archive.com/[EMAIL PROTECTED]
