Avoid sharing of same session across multiple tabs in internet explorer for java based web application...

[srinu_ammina]

Hi,

We are facing the issues of sharing the same session accross multiple tabs in a single IE browser.

If one user is logged in one TAB and opens a new TAB and logged to the same application with some other user then the last tabs logged in session is being carries out in all the previous TABs

We are using Jboss-4.0.3SP1 application server and using the JAVA technologies for web application.

Please guide us how to handle the situation so that different users can logon to the same application in different TAB's in the same browser and can proceed.

Thanks

Srinivasa Rao Ammina

[robby.cornelissen]

The two most widely used ways to track user sessions in Java EE are:

1. Cookies, by storing a cookie named JSESSIONID containing the session ID.
2. URL rewriting, by appending the session ID is to every URL.

When using cookies, since the browser only has one cookie containing the session ID, the session ID is shared by all tabs/windows (excluding incognito/secret windows). So, if you want to get something like this working, you would have to either:

• Rely on URL rewriting for session tracking
• Implement your own multi-cookie strategy

Best of luck.

[srinu_ammina]

Hi

Thank you for the reply and can you please eloborate more on multi cookies handling part with some example snippet ?

Thanks

Srinivasa

[robby.cornelissen]

I'm afraid it's going to take more than an example snippet. When I said: implement your own multi-cookie strategy, that's pretty much what I meant. To be clear: I would not recommend this approach, nor implement this myself. I would say URL rewriting is your best bet to get to a solution in a reasonable amount of time.

[jfclere]

Well I would say the browser stores the cookies and don't care about which tab it sends the cookie.

I have found this:

http://stackoverflow.com/questions/968810/internet-explorer-8-session-shared-among-explorer-window

you may try it and report if that helps...

[srinu_ammina]

Thank you for the update but as per the article mentioned in the provided link, it deals more with the client browser settings but we as a service provider we cannot ask each and every client to intall plug-ins and go ahead and hence we are mainly looking the options NOT TO share the sessions across multiple TAB's through programatically in java technologies.

If there are any such options please guide/point to the location so that we can explore in those lines.

Thanks in advance.

Srinivasa

[jfclere]

I don't think that is doable as the browser will share the cookies by default.

[jaikiran]

One other option has already been suggested in this thread. Have you looked into that option? Isn't that feasible?

[srinu_ammina]

hmm... I am not sure how this can be implemented, but I saw some of the banking sites (exmaple: www.icicibank.com) in which even we login with two diffrent users in two different TABS in a single browser window, sessions are not being shared among two diffrent users.

[jaikiran]

Srinivasa Rao Ammina wrote:

hmm... I am not sure how this can be implemented, but I saw some of the banking sites (exmaple: www.icicibank.com) in which even we login with two diffrent users in two different TABS in a single browser window, sessions are not being shared among two diffrent users.

Previously:

The two most widely used ways to track user sessions in Java EE are:

....

URL rewriting, by appending the session ID is to every URL.