Hello Erik,
I have noticed that I'm loosing session not only when I switch from http to
https but when I switch from ip-address to pc-name.e.g the first request is
with
http://123.33.44.24:8080/myapp and the  second is http://pc24:8080/mypapp. I
beleive that the change of the protocol used is considered as a request to
another application and this causes the creation of new session.

Thank you for your answer.




-----Original Message-----
From: Erik Weber [mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 05, 2004 4:51 PM
To: Struts Users Mailing List
Subject: Re: Loosing session while redirecting


I don't know any reason why a redirect should be the cause of session
"breaking", though I admit I haven't used a redirect from HTTP to HTTPS
in the middle of a user's workflow (only at the very beginning -- by
using the CONFIDENTIAL transport-guarantee in web.xml).

Is your test browser accepting cookies? Or, are your links generated in
such a way (either with Struts tags, or by using response.encodeURL
directly) that a session can be tracked without cookies?

Erik


Konstantina Stamopoulou wrote:

>Hello evelyone,
>I'm facing the following problem. I try to switch from http to https using
><forward> tags in the struts-config.xml
>
>        <forward name="standard" redirect="true"
>path="http://pc:8989/cdn-data-new/tvmode.jsp"/>
>         <forward name="secure"  redirect="true"
>path="https://pc:8989/cdn-data-new/tvmode.jsp"/>
>
>In the Action class I use : return  mapping.findForward("standard");
>Everything works fine up to here. When the redirection has been completed I
>have lost the session.
>At first I thought that switching form http to https and vice versa causes
>the problem, but I noticed that the same thing happens when I use the same
>protocol, http and use redirect.
>It is a critical problem for my project and I would appriciated if you
could
>help me.
>
>Thank you in advance
>Konstantina
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to