Re: SSO ID in the first request

2007-03-15 Thread Gregor Schneider
Hi Fredrik, > > HttpSession session = .; > session.setAttribute(String nameOfYourObject, Object yourObject); > Object yourObject = session.getAttribute(String nameOfYourObject); Surely, this cannot be correct? It would take me some effort to try sharing attributes between webapps, so I can'

Re: SSO ID in the first request

2007-03-14 Thread Fredrik Tolf
On Tue, 2007-03-13 at 19:34 +0100, Gregor Schneider wrote: > I guess you're talking about JSSOSessionID-Cookie, right? Indeed. > I believe the whole design is not too smart: > > Since all webapps are sharing the same session, I'd store the needed > values as session-attributes (too lazy to look

Re: SSO ID in the first request

2007-03-13 Thread Gregor Schneider
I guess you're talking about JSSOSessionID-Cookie, right? I believe the whole design is not too smart: Since all webapps are sharing the same session, I'd store the needed values as session-attributes (too lazy to look it up right now, but should work like HttpSession session = .; session.s