Maintain coldfusion j2ee session using URL parameters with cookies disabled -


i cannot seem session preserve j2ee enabled , browser cookies disabled using session.urltoken append session information link.

i need specific solution these exact criteria because of following limitations:

  1. we have on 2500 templates , trying avoid adding urlsessionformat() every link.
  2. we have internal variable include on every link (link.cfm?#ourvariable#) set single login verification template. we'd reuse variable insert session.urltoken when necessary.
  3. we'd prefer use j2ee. code works fine cf session management.
  4. 1/3 of our users not allow cookies , cannot force them to. in locked down environment old browsers.

now, test case.....

application.cfc:

<cfcomponent>       <cfset this.name = "test" />       <cfset this.sessionmanagement = true>       <cfset this.sessiontimeout = createtimespan(2,0,0,0)>   </cfcomponent>   

index.cfm:

<cfoutput> <cfset session.testme = 123 /> <a href="#urlsessionformat("index2.cfm?somevar=test")#">link 1</a> or <a href="index2.cfm?#session.urltoken#&somevar=test">link 2</a> </cfoutput> 

index2.cfm:

<cfdump var="#session#"> 

with browser cookies turned off , j2ee session variables turned on, "link 1" display "testme" key in cfdump. "link 2" not.

with browser cookies turned off , j2ee session variables turned off (defaulted coldfusion cfid/cftoken session management), both links display "testme" key expected.

please consider 4 pieces of criteria above when offering solutions why cf session management works expected while j2ee not.

thanks insight can provide!


Comments

Popular posts from this blog

Sass watch command compiles .scss files before full sftp upload -

filehandler - java open files not cleaned, even when the process is killed -

gridview - Yii2 DataPorivider $totalSum for a column -