Mailing-List: contact httpclient-users-help@hc.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "HttpClient User Discussion" <httpclient-users@hc.apache.org>
Received-SPF: pass (athena.apache.org: domain of lsborle@gmail.com designates
 74.125.92.148 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:mime-version:content-type;
        b=w+kEHBP1+gULYcgtIJy8U9XUuArIuOK91pGkHyWaOcNpVgyEXCar3MK97StbDoM7/u
         V0MAt+M5jKQyILfIHxiPnW8pXWH67w4dERVkFJFZdHfiMKCSB3g+8Yw+WXMrb5hQF4I/
         vRcp2W2f14KVmKrgMTF7eTVS7BX94uUlnMINY=
Message-ID: <9e154a080807161618r102bd921u53c70bb4a64cbb2a@mail.gmail.com>
Date: Wed, 16 Jul 2008 16:18:42 -0700
From: "Leena Borle" <lsborle@gmail.com>
To: httpclient-users@hc.apache.org
Subject: HttpClient invalidates session
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_40215_14611895.1216250322593"

------=_Part_40215_14611895.1216250322593
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi,
  I have a struts-2 application running on Tomcat-5 with Single Sign on
enabled. What I am trying to do is , use HttpClient(struts2 app) to access
data  other WAR(say WAR2) which also has Form Based login system. To avoid
sending user's credentials(Which I don't have in my application), I am
trying to send cookie-JSESSIOIDSSO in the request header.
  Everything works fine, I get the data back. But after that, my application
throws error that, session is invalidated.
  How do I stop HttpClient from invalidating the session ?

Thanks
Leena.

Here is the code in my application ,

(Struts-2) HttpServletRequest request = ServletActionContext.getRequest();

        //try out httpclient

        javax.servlet.http.Cookie[] cookies = request.getCookies();
        HttpState newState = new HttpState();
        javax.servlet.http.Cookie ssoID = null;
        for(int c = 0; c < cookies.length; c ++) {
            javax.servlet.http.Cookie k = cookies[c];
            if(k.getName().equalsIgnoreCase("JSESSIONIDSSO"))
                ssoID=k;
        }


        HttpClient client = new HttpClient();
        client.setState(newState);
        GetMethod getMethod  = new GetMethod("
http://localhost:8080/war2/exceuteServlet");

getMethod.getParams().setCookiePolicy(org.apache.commons.httpclient.cookie.CookiePolicy.IGNORE_COOKIES);

        getMethod.setRequestHeader("Cookie", ssoID.getName() + "=" +
ssoID.getValue());
        try {

            int responseCode =
client.executeMethod(null,getMethod,newState);
            String body = getMethod.getResponseBodyAsString();

            AppLogger.getLogger().debug("Response code = " + responseCode+ "
\nResponse is " + body);

          } catch (HttpException e) {
              // TODO Auto-generated catch block

          } catch (IOException e) {
              // TODO Auto-generated catch block

          } finally {
              // release any connection resources used by the method
              getMethod.releaseConnection();
          }

------=_Part_40215_14611895.1216250322593--