>this is only a problem if the user opens up multiple windows themselves,
>not if the application opens up multiple windows. Try the following:
>Login to your application and go to a page that requires that you logged
>in. from the file menu (IE) select new > window. Observe that the new
>window is "logged in"

I guess the problem is that I am using javascript to popup the new window...
so I can control size and style and whatnot... maybe there is a javascript
trick to make sure the new window is a child of the existing window... not
sure.... I confim that "New Window" from the file menu works as
advertised...


>Using the session cookie leverages the servlet container's ability to
>establish and track sessions. Setting persistent cookies has to be
>handled yourself and while is not impossible, is cumbersome and
>redundant. Nothing precludes you from setting your own persistent cookie
>on Login and parsing the persistent cookies in a sessionvalidator for
>every request that is made without a logged in user.

I have been trying to implement this, without much success... For some
reason getting an authenicated user based on persistant cookies and adding
it to the RunData doesn't seem to take and it still wants me to
authenticate... granted I stole the code from the existing
TemplateSessionValidator and LoginUser and I haven't made my way through all
the source involved in the classes they makes use of... So I am probably
missing some important step...


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to