tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <ch...@christopherschultz.net>
Subject Re: tomcat session mixing
Date Mon, 17 Jun 2013 21:59:47 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Joel,

On 6/17/13 5:12 PM, joel wrote:
> Thanks for the help. I'm not an expert with tomcat management,
> There are no servlets. I don't know what Threadlocal, 
> doGet/doPost/etc are, so presumably haven't used them.

Eventually, everything is a servlet (or maybe a Filter in certain
cases). Even if your code does not include doGet/doPost, they are
likely being used under the covers.

> No references are kept to request,response, session, or stream 
> objects. At login, a user session token is stored:
> 
> session.setAttribute("userToken", userToken);
> 
> This token also contains wrapper methods to make server calls.

What does that mean "make server calls"? Do you make those calls in
separate threads or anything like that?

> When tomcat starts mixing sessions, it at least some of the time 
> incorrectly maps the userToken with the user.

If you set the userToken a single time in a session and you always
pull it out of the session instead of getting it anywhere else, then
you should be okay with respect to that particular object.

Does the userToken have any request-oriented object references in it
(e.g. request, response, or streams of any kind)?

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=F83I
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message