Re: Struts2 login action class seems to be reused

2018-05-15 Thread Yasser Zamani
On 5/16/2018 6:59 AM, Prasanth Pasala wrote: > We have two applications (websites) to make it easier for users we have a > third site that acts as a common login place. Once the user enters the > username and password it determines the right site to use and does a forward > to that context

Re: Struts2 login action class seems to be reused

2018-05-15 Thread Prasanth Pasala
We have two applications (websites) to make it easier for users we have a third site that acts as a common login place. Once the user enters the username and password it determines the right site to use and does a forward to that context (applications hosted in the same host). When using

Re: Struts2 login action class seems to be reused

2018-05-15 Thread Jaikiran Pai
I don't have enough context of this discussion, but looking briefly at this, it looks like you are using Apache HTTP client (probably with pooled connections) and it seems like a connection reuse for a subsequent login request is sending a Cookie with the request (when it shouldn't?). If

Re: Struts2 login action class seems to be reused

2018-05-15 Thread Martin Gainty
8443 indicates secure connection so perhaps a misconfig with wildfly standalone.xml (see below) https://docs.jboss.org/author/display/WFLY10/Admin+Guide#AdminGuide-SessionCookieConfiguration Admin Guide - WildFly 10 - Project Documentation

Re: Struts2 login action class seems to be reused

2018-05-15 Thread Prasanth Pasala
See below the header information when the exception occurred. Strange thing is JMeter is saying it did not send any cookie (which is want I would except in this case as it is just requesting the login page) Cookie: JSESSIONID=ZclUN41sWwTsPGRw7Cf255OHu7jnQtgt4rEZ2QDZ.    (xx - is

Re: Struts2 login action class seems to be reused

2018-05-15 Thread Prasanth Pasala
Hi Martin, Thanks for the response. We are using Wildfly 11.0.0 Final.  I will try to get the HTTP header dump. Thanks, Prasanth On 05/15/2018 07:44 AM, Martin Gainty wrote: > Hi Norbert/Prasanth > > Struts2 login action problem has morphed to "Invalid Session State"with > Wildfly's

Re: Re: Struts2 login action class seems to be reused

2018-05-15 Thread Martin Gainty
Hi Norbert/Prasanth Struts2 login action problem has morphed to "Invalid Session State"with Wildfly's implementation of TC 5.5 https://en.wikipedia.org/wiki/WildFly

Re: Struts2 login action class seems to be reused

2018-05-15 Thread Yasser Zamani
On 5/15/2018 12:45 AM, Prasanth Pasala wrote: > A different issue is coming up now after the get methods are removed.  > Getting the below exception some times when you request the login page, at > which point the browser doesn't have the session id > yet, the session id mentioned would be a