session tracking

最新推荐文章于 2017-01-13 09:55:57 发布

原创最新推荐文章于 2017-01-13 09:55:57 发布 · 884 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#session #authentication #binding #url #application #string

J2EE 专栏收录该内容

43 篇文章

订阅专栏

本文详细介绍了多种传统方式进行会话跟踪的方法，包括用户认证、隐藏表单字段、URL重写和持久Cookie等。同时探讨了会话作用域、设置会话超时、URL重写跟踪及会话绑定等内容。

1.Traditional Ways to perform session tracking: User Authentication(getRemoteUser() ); Hidden Form Fields(<input type=hidden name="..." value="...">); URL Rewriting( some use java.rmi.server.UID().toString() to dentify unique one); Persistent Cookie.

2. Sessions are scoped at the web Application level.

3. setting the session timeout: in web.xml:<session-config> <session-timeout> value </session-timout> </session-config>. HttpSession.setMaxInactiveInterval(int secs) secs<0means never time outm

4. URL rewriting session tracking: HttpServletResponse.encodeURL(String url); HttpServletResponse.encodeRedirectURL(String url); HttpServletResponse.isRequestedSesssionIdValid();

5.session binding: session.addAttribute(key, new HttpSessionBindingListener());

HttpSessionBindingListener.valueBound()&HttpSessionBindingListener.valueUnbound() involk when bind&unbind