ISA Server 2006 的 Java HttpSession 问题
我希望你能帮助我，因为我试图在互联网上寻找答案，但我没有找到任何有关此的信息。
问题：我有一个常见的 Java Web 应用程序（第一页是登录页面，然后是系统选项），它在公共环境中运行得很好。我有一个客户，其企业使用 ISA Server 2006 作为代理，而该地方的人员会遇到一些错误，例如显示同时登录系统的其他用户的信息。我认为错误在于 ISA 正在缓存会话 cookie，当某些用户发出请求时，ISA 共享该 cookie，并向我的服务器发送带有错误 sessionId 的请求。
有人对这个问题有任何想法或知道如何解决它（我无权访问 ISA 以避免缓存我的应用程序）？
谢谢！。
I hope you can help me, because I try to find answers on internet but I didnt find anything about this.
Problem: I have a common java web application (first page is login and then system options) that run very well in public environments. I have a client that has ISA Server 2006 as a proxy for his enterprise and people in that place get some mistakes like show information of other users that are concurrently logged in the system. I think the error is that ISA is caching the session cookie and when some user make a request, the ISA share that cookie sending to my server a request with bad sessionId.
Someone has any idea about this problem or knows how to solve it (I dont have access to ISA to avoid caching of my app)?
Thanks!.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
我从未听说过代理缓存会话 cookie 的问题。这并不是说这不可能发生，但我会先看看离家更近的地方。您所描述的将是非线程安全代码的预期结果。查找代码库中的并发问题。另一种可能性是网络缓存。如果对数据的请求全部发送至同一 URL，并且您没有适当地控制缓存，则可以想象，Web 缓存可能会缓存一个用户请求的数据并将其显示给另一用户。
I've never heard of a problem with proxies caching session cookies. That's not to say it can't happen, but I'd look closer to home first. What you're describing would be an expected outcome of non-thread-safe code. Look for concurrency issues in your codebase. Another possibility is web caching. If requests for data all go to the same URL and you aren't controlling caching appropriately, it's conceivable that a web cache might cache data from one user's request and show it to another user.