Original Message:
Sent: Tue January 07, 2025 07:02 AM
From: Domenico Di Santo
Subject: http session
Hi Atanu,
many thanks for your suggestion, but I'm not sure sessionStorage should be relied upon for storage of security-related data. I would prefer a server side approach for security tokens, that's why I was thinking about http session.
Many thanks!
------------------------------
Domenico Di Santo
IBM
Original Message:
Sent: Tue January 07, 2025 04:57 AM
From: Atanu Roy
Subject: http session
Hello Domenico,
Thanks for explaining the requirement.
So, for your use case, what I understood, you are looking to cache the token somewhere.
You can use the sessionStorage object which will let you store key/value pairs in the browser, the sessionStorage object stores data for only one session and the data is deleted when the browser is closed.
This is how you can use it -
sessionStorage.setItem("token", "your_token");sessionStorage.getItem("token");
Hope this helps!
Thanks!
------------------------------
Atanu Roy
Lead Engineer
London Stock Exchange Group
Original Message:
Sent: Tue January 07, 2025 04:32 AM
From: Domenico Di Santo
Subject: http session
Hi Atanu,
the purpose of this is to provide the logged user with a safe place to store a security token/refresh token, which is used to call an external REST API service. Since the security/refresh token expires in ten minutes, we need a place to store the token to retrieve it every time the user needs to call the REST API, to avoid asking for a new token for each interaction with the REST service - which is very frequent.
Thanks for your help, any suggestions will be appreciated!
------------------------------
Domenico Di Santo
IBM
Original Message:
Sent: Sun December 22, 2024 04:09 AM
From: Atanu Roy
Subject: http session
Hello Domenico,
Can you please explain the purpose of this ?
Thanks!
------------------------------
Atanu Roy
Lead Engineer
London Stock Exchange Group
Original Message:
Sent: Fri December 20, 2024 06:54 AM
From: Domenico Di Santo
Subject: http session
Hi all,
is it possible to access the underlying http session from the Process Portal (similarly to how I would do in a standard scenario with request.getSession API?)
Many thanks
------------------------------
Domenico Di Santo
IBM
------------------------------