Skip to main content



      Home
Home » Eclipse Projects » Remote Application Platform (RAP) » how are sessions managed / security
how are sessions managed / security [message #68855] Fri, 04 January 2008 08:17 Go to next message
Eclipse UserFriend
Originally posted by: joshsliver1981.yahoo.com

I'd like to understand the basics how RAP manages sessions when different
users connect to the application. Has somebody already described this
somewhere?

How does RAP recognize which output to send to which user? Are the users
identified by cookies or is socket communication on top of the http port
used for the identification?

What about security? Could somebody else eavesdrop me while using a RAP
application by faking cookies, or has some care been taken so that nobody
can listen to my session (except, of course he interferes on the tcp/ip
layer)?

Josh
Re: how are sessions managed / security [message #68960 is a reply to message #68855] Sat, 05 January 2008 04:44 Go to previous messageGo to next message
Eclipse UserFriend
Originally posted by: joshsliver1981.yahoo.com

If you don't know about some documentation how RAP manages its sessions,
maybe you can still point me to the relevant source code, where I can
start to figure out what is happening?

Is the principle similar to the explanation at
http://en.wikipedia.org/wiki/Session_%28computer_science or is it
something completely different?

Thanks
Josh
Re: how are sessions managed / security [message #69065 is a reply to message #68960] Mon, 07 January 2008 08:28 Go to previous message
Eclipse UserFriend
Originally posted by: rsternberg.innoopract.com

Hi Josh,

Josh Sliver wrote:
> If you don't know about some documentation how RAP manages its sessions,
> maybe you can still point me to the relevant source code, where I can
> start to figure out what is happening?

RAP runs on a JEE servlet container and uses the session management of this
container. You can add attributes to the session store which can be
obtained by RWT#getSessionStore(). The class SessionSingletonBase may also
be interesting for you.

> Is the principle similar to the explanation at
> http://en.wikipedia.org/wiki/Session_%28computer_science or is it
> something completely different?

Yes, the sessions in JEE work as described in this article.

Best,
Ralf
Previous Topic:Which version of eclipse for RAP
Next Topic:FocusGained Events from custom Buttons
Goto Forum:
  


Current Time: Sat Jul 12 17:16:22 EDT 2025

Powered by FUDForum. Page generated in 0.05156 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 3.0.2.
Copyright ©2001-2010 FUDforum Bulletin Board Software

Back to the top