Eclipse Community Forums: Remote Application Platform (RAP)

Home » Eclipse Projects » Remote Application Platform (RAP) » how are sessions managed / security

how are sessions managed / security [message #68855]

Fri, 04 January 2008 08:17

Eclipse User

Originally posted by: joshsliver1981.yahoo.com

I'd like to understand the basics how RAP manages sessions when different
users connect to the application. Has somebody already described this
somewhere?

How does RAP recognize which output to send to which user? Are the users
identified by cookies or is socket communication on top of the http port
used for the identification?

What about security? Could somebody else eavesdrop me while using a RAP
application by faking cookies, or has some care been taken so that nobody
can listen to my session (except, of course he interferes on the tcp/ip
layer)?

Josh

Re: how are sessions managed / security [message #68960 is a reply to message #68855]

Sat, 05 January 2008 04:44

Eclipse User

Originally posted by: joshsliver1981.yahoo.com

If you don't know about some documentation how RAP manages its sessions,
maybe you can still point me to the relevant source code, where I can
start to figure out what is happening?

Is the principle similar to the explanation at
http://en.wikipedia.org/wiki/Session_%28computer_science or is it
something completely different?

Thanks
Josh

Re: how are sessions managed / security [message #69065 is a reply to message #68960]

Mon, 07 January 2008 08:28

Eclipse User

Originally posted by: rsternberg.innoopract.com

Hi Josh,

Josh Sliver wrote:
> If you don't know about some documentation how RAP manages its sessions,
> maybe you can still point me to the relevant source code, where I can
> start to figure out what is happening?

RAP runs on a JEE servlet container and uses the session management of this
container. You can add attributes to the session store which can be
obtained by RWT#getSessionStore(). The class SessionSingletonBase may also
be interesting for you.

> Is the principle similar to the explanation at
> http://en.wikipedia.org/wiki/Session_%28computer_science or is it
> something completely different?

Yes, the sessions in JEE work as described in this article.

Best,
Ralf

Previous Topic:	Which version of eclipse for RAP
Next Topic:	FocusGained Events from custom Buttons

Goto Forum:

-=] Back to Top [=-

Current Time: Fri Sep 05 08:18:52 EDT 2025

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter