Maintain coldfusion j2ee session using URL parameters with cookies disabled -


i cannot seem session preserve j2ee enabled , browser cookies disabled using session.urltoken append session information link.

i need specific solution these exact criteria because of following limitations:

  1. we have on 2500 templates , trying avoid adding urlsessionformat() every link.
  2. we have internal variable include on every link (link.cfm?#ourvariable#) set single login verification template. we'd reuse variable insert session.urltoken when necessary.
  3. we'd prefer use j2ee. code works fine cf session management.
  4. 1/3 of our users not allow cookies , cannot force them to. in locked down environment old browsers.

now, test case.....

application.cfc:

<cfcomponent>       <cfset this.name = "test" />       <cfset this.sessionmanagement = true>       <cfset this.sessiontimeout = createtimespan(2,0,0,0)>   </cfcomponent>   

index.cfm:

<cfoutput> <cfset session.testme = 123 /> <a href="#urlsessionformat("index2.cfm?somevar=test")#">link 1</a> or <a href="index2.cfm?#session.urltoken#&somevar=test">link 2</a> </cfoutput> 

index2.cfm:

<cfdump var="#session#"> 

with browser cookies turned off , j2ee session variables turned on, "link 1" display "testme" key in cfdump. "link 2" not.

with browser cookies turned off , j2ee session variables turned off (defaulted coldfusion cfid/cftoken session management), both links display "testme" key expected.

please consider 4 pieces of criteria above when offering solutions why cf session management works expected while j2ee not.

thanks insight can provide!


Comments

Popular posts from this blog

gridview - Yii2 DataPorivider $totalSum for a column -

java - Suppress Jboss version details from HTTP error response -

Sass watch command compiles .scss files before full sftp upload -