[wsrp-wsia] [I#170] Scope of Producer-Consumer HTTP session

[Gil Tayar <Gil.Tayar@webcollage.com>]

Issue: 170
Status: Active
Topic: interface
Class: Minor_Technical
Raised by: Yossi Tamari
Title: Scope of Producer-Consumer HTTP session
Date Added: 4-Dec-2002
Document Section:   v0.85/3.13
Description:
In the Transport Issues section of the spec it says: "Consumers that manage transport layer issues, such as cookies, MUST return them to the Producer only for subsequent invocations using the same userContext.".
However, since the userContext may change because the user's role/profile has changed, but he is still in the same session, so the same cookie should still be sent. On the other hand, the user may have logged out of his portal (closed his browser) and logged in again, but normally his user context hasn't changed. In this case there should be no requirement to send the cookie (it is a new user session, and a new load-balanced instance may be used).
I think the scoping here should be to the consumer's concept of user-session rather than to the userContext.

Gil Tayar

WebCollage