[jira] Updated: (STR-1609) Extend TokenProcessor to handle a list of transaction tokens

["Paul Benedict (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/struts/browse/STR-1609?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Paul Benedict updated STR-1609:
-------------------------------

    Fix Version/s:     (was: Future)
                   1.4.0

> Extend TokenProcessor to handle a list of transaction tokens
> ------------------------------------------------------------
>
>                 Key: STR-1609
>                 URL: https://issues.apache.org/struts/browse/STR-1609
>             Project: Struts 1
>          Issue Type: Improvement
>          Components: Core
>    Affects Versions: 1.1.0
>         Environment: Operating System: All
> Platform: All
>            Reporter: Art Snowdon
>            Priority: Minor
>             Fix For: 1.4.0
>
>         Attachments: MultipleTokensPatch.txt
>
>
> The TokenProcessor currently supports a single token per user session.  This can
> be used to guarantee that a user will only submit a form once.  However, since
> only one token is supported, a user can not have multiple browser windows open
> and submit forms from all of them.  Only the most recent form would have a valid
> token.
> This enhancement suggests supporting a list (say 20) of tokens so the user could
> have a fair number of browser windows open and all would have a valid token.
> A suggested patch is available.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.