Bill Winspur wrote:
Questions --------- 1. I assume the web server (tomcat in my case), not oxf, is deciding when to initialize and destroy the http session. Is this true ?
Yes, we just hook up to the Servlet or Portlet API.
2. Does OXF have any control over the session duration ?
No. J2EE does not provide APIs to control this. This is dependent on the application server. For Tomcat, I think the default is about 30 minutes, but it is configurable.
3. Should I be able to use the session to pass docs between pages (if I were not screwing things up somehow), or do you advise against it?
This is not a very good strategy, because you are quickly in trouble if you start duplicating browser windows (IE's New Window, for example). You quickly get to the point where you start having to use ids, and managing this becomes difficult.
This is just a personal opinion, of course.
4. What is the recommended practice for passing docs between pages?
The practice described in the tutorial: using XUpdate, copying XML documents over from XForms instance to XForms instance.
In such a case, using the instance-passing="forward" attribute in the Page Flow, either on the <config> element of the Page Flow configuration, or individually on action <result> elements, guarantees that a server-side redirect (forward) is performed. This way, you can pass documents of any size, and the state is stored on the client (web page). Furthermore, you can encrypt such state so that it is not possible for a user to tamper with the data saved on the client.
This approach has limits: it causes pages to be larger because they have to store some state. However, it tends to beat the session-based methods. Again, just an opinion.
The session has its place, of course. It can store user preferences for a site, things like shopping carts that are expected to remain the same across multiple browser windows, etc.
5. Are session start and end defined by J2EE, or by server implementations?
Do you mean the mechanisms for implementing sessions?
This being said, it doesn't explain why your session gets cleared. In most cases, this is due to browser configuration, such as disabling cookies. Could that be the case? Have you tried a couple of browsers?
-Erik
------------------------------------------------------- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl _______________________________________________ orbeon-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/orbeon-user
