Re: Losing session between calls from mobile phone

2020-05-04 Thread AJ Chen
Chris and Peter, Yes, after using HTTPS in every url, session does not get loss any more. Thank you for spotting the cause. -aj On Sat, May 2, 2020 at 7:01 AM logo wrote: > AJ > > > Am 30.04.2020 um 22:22 schrieb AJ Chen : > > > > The session problem happens when testing without SSL. > > >

Re: Losing session between calls from mobile phone

2020-05-02 Thread logo
AJ > Am 30.04.2020 um 22:22 schrieb AJ Chen : > > The session problem happens when testing without SSL. > Just a thought: If the session cookie has the secure flag it will not be sent on http requests. (That would fail your test above in any case!) Now if that happens during regular https

Re: Losing session between calls from mobile phone

2020-04-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 AJ, On 4/30/20 16:22, AJ Chen wrote: > The session problem happens when testing without SSL. If you aren't using SSL, setting secure="true" on the connector will cause a problem, here. All Cookies will be created with secure="true" and the

Re: Losing session between calls from mobile phone

2020-04-30 Thread AJ Chen
The session problem happens when testing without SSL. I'll try to test with Tomcat session manager example app. Thanks, Chris. -aj On Wed, Apr 29, 2020 at 3:05 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > AJ, > > On

Re: Losing session between calls from mobile phone

2020-04-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 AJ, On 4/29/20 13:46, AJ Chen wrote: > On Wed, Apr 29, 2020 at 10:28 AM Christopher Schultz < > ch...@christopherschultz.net> wrote: > > AJ, > > On 4/29/20 13:24, AJ Chen wrote: Chris, When i use my latest iphone 11 to access the web app,

Re: Losing session between calls from mobile phone

2020-04-29 Thread AJ Chen
server.xml is configured for HTTPS. -aj On Wed, Apr 29, 2020 at 10:28 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > AJ, > > On 4/29/20 13:24, AJ Chen wrote: > > Chris, When i use my latest iphone 11 to access the web app,

Re: Losing session between calls from mobile phone

2020-04-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 AJ, On 4/29/20 13:24, AJ Chen wrote: > Chris, When i use my latest iphone 11 to access the web app, tomcat > server generates new session every time. It's normal use, not > private browsing.> I did not change any setting on tomcat regarding >

Re: Losing session between calls from mobile phone

2020-04-29 Thread AJ Chen
Chris, When i use my latest iphone 11 to access the web app, tomcat server generates new session every time. It's normal use, not private browsing. I did not change any setting on tomcat regarding session, use default session tracking. Is there any setting that can enforce using previous session

Re: Losing session between calls from mobile phone

2020-04-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 AJ, On 4/28/20 16:13, AJ Chen wrote: > Andre, thanks for asking the questions. Yes, we try to get > understand the behaviors. > > We have seen iphone and other android phones, on different > carriers, from different networks, encounter this problem

Re: Losing session between calls from mobile phone

2020-04-28 Thread AJ Chen
Andre, thanks for asking the questions. Yes, we try to get understand the behaviors. We have seen iphone and other android phones, on different carriers, from different networks, encounter this problem - losing session. It does not seem there is a pattern so far. Users use all kinds of phones.

Re: Losing session between calls from mobile phone

2020-04-28 Thread tomcat/perl
On 28.04.2020 18:28, AJ Chen wrote: Thanks. Martin and Mark. I can recreate the problem: I compare two different mobile phones. One phone can log in and proceed. Server log shows the same session persists (same sessionID upon different requests). The other phone can log in, but upon next

Re: Losing session between calls from mobile phone

2020-04-28 Thread AJ Chen
Thanks. Martin and Mark. I can recreate the problem: I compare two different mobile phones. One phone can log in and proceed. Server log shows the same session persists (same sessionID upon different requests). The other phone can log in, but upon next request, server log show a new session is

Re: Losing session between calls from mobile phone

2020-04-28 Thread Mark Thomas
On 28/04/2020 07:47, Martin Grigorov wrote: > On Tue, Apr 28, 2020 at 9:11 AM AJ Chen wrote: > >> Anyway to fix it? thanks. -aj >> > > First you need to investigate whether there is a proxy. > Then what kind of proxy. > Then where is its configuration. > Then consult with its manual and see

Re: Losing session between calls from mobile phone

2020-04-28 Thread Martin Grigorov
On Tue, Apr 28, 2020 at 9:11 AM AJ Chen wrote: > Anyway to fix it? thanks. -aj > First you need to investigate whether there is a proxy. Then what kind of proxy. Then where is its configuration. Then consult with its manual and see whether there is something wrong/missng. > > > On Mon, Apr

Re: Losing session between calls from mobile phone

2020-04-28 Thread AJ Chen
Anyway to fix it? thanks. -aj On Mon, Apr 27, 2020 at 10:54 PM Martin Grigorov wrote: > Hi, > > On Tue, Apr 28, 2020 at 2:23 AM AJ Chen wrote: > > > My web application using tomcat 6 can track user session (cookie by > > default) for mobile and PC users in dev environment. But when deployed

Re: Losing session between calls from mobile phone

2020-04-27 Thread Martin Grigorov
Hi, On Tue, Apr 28, 2020 at 2:23 AM AJ Chen wrote: > My web application using tomcat 6 can track user session (cookie by > default) for mobile and PC users in dev environment. But when deployed on > cloud server, it fails to track session for some mobile users. meaning, > servlet always creates

Losing session between calls from mobile phone

2020-04-27 Thread AJ Chen
My web application using tomcat 6 can track user session (cookie by default) for mobile and PC users in dev environment. But when deployed on cloud server, it fails to track session for some mobile users. meaning, servlet always creates a new session upon user request. Any idea why this happens?