Hi

AFAIK JSESSIONID is controlled by a servlet container, possibly by HttpSession, CXF does not itself set JSESSIONID, and if I understand it right CXF is only used as a client, right ?

Cheers, Sergey

On 03/08/15 13:56, micleva wrote:
Hi,I have an applet which uses CXF to connect to some Web_Services.The
problem is that even if I don't specifically enable session support, after
the first call to my Web-Service, all other sub-subsequent calls will have a
JSESSIONID. I have tried this with cxf version 2.6.16 and 2.7.16, same
result on both (I can't upgrade now to a higher version than 2.x)The big
issue here is that if I change the user (web-service authentication user)
while the applet is still up and running, the same session is used and the
new authentication credentials are ignored by the server since the server
thinks it's on the same session (due to the JSESSIONID).Is there a way to
clear the JSESSIONID when the web-service user changes in my application?
Somehow I would like to invalidate the originally created session so that a
new sessoin will be created for the new user.Thanks a lot



--
View this message in context: 
http://cxf.547215.n5.nabble.com/can-t-disable-session-support-JSESSIONID-is-always-created-tp5759638.html
Sent from the cxf-user mailing list archive at Nabble.com.



--
Sergey Beryozkin

Talend Community Coders
http://coders.talend.com/

Blog: http://sberyozkin.blogspot.com

Reply via email to