Re: jetty bug?

Jin,

Those methods are not exactly sementric, as invalidate is on the session itself.

Typically if you want to change the session ID mechanism, you change the
manager and then tell the session what it's ID.   Overridding getId() on the
session is the wrong place to put a new session ID generation mechanism.

However, I'll probably change the next release to use getId() instead of _id
just as it is better style and should cost nothing.

regards



Jin Seok Lee wrote:
> Hi
> I am a Korean programmer, so I am not good at English writing.
>
> I had a problem with Jetty Session Manager, So, I needed to debug jetty 
> source.
> I found that there is an inconsistency in two methods in below.
>
> package org.mortbay.jetty.servlet;
> * @version $Id: AbstractSessionManager.java,v 1.31.2.3 2003/10/19 
> 12:14:43 gregwilkins Exp $
>
> 1) public HttpSession newHttpSession(HttpServletRequest request)
>     _sessions.put(session.getId(),session);
> 2) public synchronized void invalidate()
>     _sessions.remove(_id);
>
>
> I over-wrote the method 'session.getId()',
> and I am using differenct sessionID from Jetty Session ID ('_id') using 
> overwriting.
>
> ^^
>
> _________________________________________________________________
> MSN 8 with e-mail virus protection service: 2 months FREE* 
> http://join.msn.com/?page=features/virus
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
> Project Admins to receive an Apple iPod Mini FREE for your judgement on
> who ports your project to Linux PPC the best. Sponsored by IBM. 
> Deadline: Sept. 13. Go here: http://sf.net/ppc_contest.php



-------------------------------------------------------
This SF.Net email is sponsored by: thawte's Crypto Challenge Vl
Crack the code and win a Sony DCRHC40 MiniDV Digital Handycam
Camcorder. More prizes in the weekly Lunch Hour Challenge.
Sign up NOW http://ad.doubleclick.net/clk;10740251;10262165;m