Am Donnerstag, 31. August 2006 09:00 schrieb Josias Thöny:
> […]

> The jsessionid is always appended to the first URL when a session
> starts. At the same time, a jsessionid cookie is sent to the browser. If
> the browser accepts the cookie and sends it back with the next request,
> the server doesn't use the jsessionid request parameter anymore.
> However, if the browser does not accept session cookies, the server will
> continue to append the jsessionid to all URLs, in order to maintain the
> user session. (Not sure if the second option actually works with lenya)

Okay, thanks for this information.  Maybe I can live with that.

> AFAIK you get this behaviour with all servlet applications.
> I don't know if it can be changed, you could take a look at the servlet
> specification.

It wouldn't be nice if it couldn't be changed since such a basic framework 
like the servlet framework shouldn't force specific URL conventions upon you 
in my opinion.

> In general it should not be a problem to bookmark a URL including a
> jsessionid, or sending it as a link to somebody.

It is a problem because the people don't get the real, nice URL but 
a “disturbed” one.  It's ugly.

> The jsessionid will be discarded and a new session will be created. You
> don't have to remember the jsessionid parameter, the URL should work without
> it.

At least it works this way.

However, I wonder why you need to identify sessions anyway.  Most websites 
just don't need this in my opinion.

> […]

Best wishes,
Wolfgang

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to