GWT - Getting session management right -


i'm trying implement simple session management mechanism in gwt, , i'm still not quite sure if got right:

  1. first, in onmoduleload, check if sessionid cookie exists. if exists, call server see if still valid. if is, return user object contains sessionid , full username (i need within application).
  2. if doesn't exist, diplay login dialog. user enters username , password. call authenticationservice, check if username + password valid, return user object. sessionid gets stored cookie.
  3. when loggin out, delete sessionid cookie.

this how sessionid gets created:

string sessionid = uuid.randomuuid().tostring(); 

is far correct?

gwt session management

this might too. have gone method too, needed wider user access control. should take @ ssl. go method suits needs.


Comments

Popular posts from this blog

php - What is the difference between $_SERVER['PATH_INFO'] and $_SERVER['ORIG_PATH_INFO']? -

fortran - Function return type mismatch -

queue - mq_receive: message too long -