I am testing my application on Google App Engine local devserver. And I see 
once user session timeout and logs-in again, for few request that logged in 
session worked. All of a sudden for few request new session created though 
active session sent in request headers.


*working session request and response headers:*
GET /_ah/api/havasay/v1/secured/search/tickets?type=ticket&criteria=
organizationId:11d7e348-3559-4357-81a5-9b12268aeaac;channelId:2c17ac87-ff49-
44c2-b91d-d35e72ccfe57,047a8141-e152-4a1c-b56c-3bb6310a4ebb;status:pending,
reopened&offset=0&limit=20 HTTP/1.1

Host: local.havasay.com:8080

Accept: application/json, text/plain, */*

Accept-Encoding: gzip, deflate, sdch

Accept-Language: en-US,en;q=0.8

Cookie: JSESSIONID=11imty7x4cq58

orgKey: SAMS-00001

Referer: http://local.havasay.com:8080/home

User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like 
Gecko) Chrome/46.0.2490.80 Safari/537.36

X-DevTools-Emulate-Network-Conditions-Client-Id: 
3E584D9A-0213-448C-9020-A407CA69883F

x-hs-salt: f93982f0d7b9c186b6d456abe7476fa97d749aa8fa9d94d712c51688e2dad8fd

X-Requested-With: XMLHttpRequest




HTTP/1.1 200 OK

Cache-Control: no-cache, no-store, must-revalidate

Content-Length: 146

Content-Type: application/json; charset=UTF-8

Date: Fri, 13 Nov 2015 08:23:43 GMT

Expires: 0

Pragma: no-cache

server: Development/1.0

Server: Jetty(6.1.x)

x-frame-options: DENY


*New session created request and response headers:*


POST /_ah/api/havasay/v1/secured/resource/users HTTP/1.1



Host: local.havasay.com:8080

Accept: application/json, text/plain, */*

Accept-Encoding: gzip, deflate

Accept-Language: en-US,en;q=0.8

Content-Type: application/json;charset=UTF-8

Cookie: JSESSIONID=11imty7x4cq58

orgKey: SAMS-00001

Origin: http://local.havasay.com:8080

Referer: http://local.havasay.com:8080/home

User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like 
Gecko) Chrome/46.0.2490.80 Safari/537.36

X-DevTools-Emulate-Network-Conditions-Client-Id: 
3E584D9A-0213-448C-9020-A407CA69883F

x-hs-salt: f93982f0d7b9c186b6d456abe7476fa97d749aa8fa9d94d712c51688e2dad8fd

X-Requested-With: XMLHttpRequest




HTTP/1.1 200 OK

Access-Control-Allow-Credentials: true

Access-Control-Allow-Origin: http://local.havasay.com:8080

Cache-Control: no-cache, no-store, must-revalidate

Content-Length: 690

Content-Type: application/json; charset=UTF-8

Date: Fri, 13 Nov 2015 08:23:46 GMT

Expires: Fri, 13 Nov 2015 08:23:46 GMT

Pragma: no-cache

server: Development/1.0

Server: Jetty(6.1.x)

set-cookie: JSESSIONID=o9gl01qab596;Path=/

x-frame-options: DENY


*And in my servlet filter I have code like this*


String requestedSessionId = request.getRequestedSessionId();
        boolean requestedSessionIdFromCookie = 
request.isRequestedSessionIdFromCookie();
        LOGGER.info("Requested Session ID from cookie: 
"+requestedSessionIdFromCookie);
        LOGGER.info("Requested Session ID: "+requestedSessionId);
        HttpSession session = request.getSession(false);
        if(session == null){
            session = request.getSession(true);
        }
        LOGGER.info("Is Session New: "+session.isNew());
        LOGGER.info("Session ID: "+session.getId());


*For above code log is as below*

[INFO] INFO: Requested Session ID from cookie: true[INFO] INFO: Requested 
Session ID: 11imty7x4cq58[INFO] INFO: Is Session New: true[INFO] INFO: Session 
ID: o9gl01qab596


I am not able to track what causes the issue? Is it problem with GAE? I am 
trying to find the root cause for last two days.. still no clue. Please 
help me

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/892a12e6-cd5a-40a8-b0da-229984b29a60%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to