Session shared in between tabs

by

Usually cookies are used for session handling. Then all tabs and browser windows share the same session. But you can configure your servlet container to use URL rewrite instead of cookies. (Here is an example for Jetty.)

With URL rewrite the session is only identified via a URL parameter containing the session ID. So every internal URL of your web application has to be enhanced with this parameter using the method HttpServletResponse.encodeURL(). If you are using a web framework like Wicket, chances are good that this is already done for you.

With URL rewrite it is possible to have several indepedent sessions in different windows or tabs of the same browser instance.

Update:
In response to the downvote I want to make clear the different behaviour of URL rewriting:

Let’s assume the website’s URL is http://webapp.com.

Cookies:
Open http://webapp.com in the first browser tab.

The server creates a session and sends a cookie in the response.

The Browser stores the cookie.

Then open http://webapp.com in the second browser tab. The browser associates this URL with the recently stored cookie and adds the cookie to the request.

For the server there is no difference between requests from the first or second browser tab and responds from the same session. Sometimes this is the desired behaviour.

URL rewriting:
Open http://webapp.com in the first browser tab.

The server creates a session with ID 1 and adds the parameter jsessionid=1 to every URL in the response page. No cookie is transferred.

All further requests to another page of the same webapp from the first browser tab include the session ID (for exeample 1).

Then open http://webapp.com from the second browser tab. Here is the difference! Because there is no cookie and no jsessionid parameter in the request, the server creates a new session (i.e. ID 2) and adds parameter jsessionid=2 to every URL contained in the response page. From now on all subsequent requests from the second browser tab are associated with session 2.

So you have two independend sessions in the same browser.

More Related Contents:

  1. Java / Jakarta EE web development, where do I start and what skills do I need? [closed]
  2. Difference between JSP EL, JSF EL and Unified EL [closed]
  3. Differences between cookies and sessions?
  4. Java Front Controller [duplicate]
  5. Why set a JSP page session = “false” directive?
  6. JavaEE, Jboss, Empty string somewhere [closed]
  7. Prevent user from seeing previously visited secured page after logout
  8. javax.el.PropertyNotFoundException: Property ‘foo’ not found on type com.example.Bean
  9. How to use relative paths without including the context root name?
  10. How perform validation and display error message in same form in JSP?
  11. Strip whitespace from jsp output
  12. How to transfer data from JSP to servlet when submitting HTML form
  13. How to compare two object variables in EL expression language?
  14. Convert and format a Date in JSP
  15. There is no Action mapped for namespace [/] and action name [login] associated with context path [/Struts2Test]
  16. Upload multiple files at once to a Struts2 @Action
  17. Calculate total sum of all numbers in c:forEach loop
  18. Include another JSP file
  19. Any way to share session state between different applications in tomcat?
  20. How to evaluate a scriptlet variable in EL?
  21. Enabling JavaServerPages Standard Tag Library (JSTL) in JSP
  22. jsp for business layer [closed]
  23. How to send redirect to JSP page in Servlet
  24. java.lang.NoClassDefFoundError: javax/servlet/jsp/tagext/TagLibraryValidator
  25. Access Enum value using EL with JSTL
  26. Selected value for JSP drop down using JSTL
  27. What does the crossContext attribute do in Tomcat? Does it enable session sharing?
  28. Where can I download JSTL jar [closed]
  29. How to output HTML from JSP block?
  30. Character encoding JSP -displayed wrong in JSP but not in URL: “á » á é » é”

Leave a Comment