Mailing-List: contact axis-c-user-help@ws.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache AXIS C User List" <axis-c-user@ws.apache.org>
Received-SPF: pass (athena.apache.org: domain of premalal@gmail.com designates
 209.85.198.186 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=received:subject:references:from:x-url:to:date:in-reply-to:message-id:user-agent:mime-version:content-type:sender;
        b=qgTXaphpE12odQs6K/hmr/iTgZYJnP/NShyio4J9KT0+ALVhoPgRlGF3M5u6nzaB+wuTrmVIg1TcA0LffE+hiVHCbv+iinr4NdwXsy8O6nkoOvYEsBGtZVpgLmPfSnSgbA+/e0KzGSAgjHkse4sn8dHrutsTq2+EXmUQl9aL2M4=
Subject: Re: session cookies
References: <489947c0711291849p56730db7mcf5ec17f64f1b5f8@mail.gmail.com>
From: Dinesh Premalal <xydinesh@gmail.com>
To: axis-c-user@ws.apache.org
Date: Sat, 01 Dec 2007 09:51:45 +0530
In-Reply-To: <489947c0711291849p56730db7mcf5ec17f64f1b5f8@mail.gmail.com>
 (Subra A. Narayanan's message of "Thu\, 29 Nov 2007 21\:49\:34 -0500")
Message-ID: <87sl2navty.fsf@etch.wso2.com>
User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.0.95 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: Dinesh Premalal <premalal@gmail.com>

Hi Subra,

"Subra A Narayanan" <aswathsn@gmail.com> writes:

> Hello folks,
>
> I have a webservice that requires that should be accessible only by
> authenticated users. right now, the way it works is, each and every request has
> to be authenticated. i was wondering, if there is a way in axis2/c to generate
> a session cookie or id which would be valid for a given period of
> time. 

AFAIK, there is no session cookie or id management system in Axis2/C. 

>the
> webservice would set this cookie after the first request comes in and is
> successfully authenticated but each subsequent request would just pass this
> cookie and there will be no need for authenticating every incoming request.
>

Couldn't you use HTTPS for this scenario? Though it is not
authenticate every request, at least it authenticate before session
begins :) 

> does this make sense? is it doable in axis2c?

I think this can be done, My feeling is , this should be handled at http
transport level.

thanks,
Dinesh

---------------------------------------------------------------------
To unsubscribe, e-mail: axis-c-user-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-c-user-help@ws.apache.org