Re: AJAX and HttpSession

[tibor katelbach <oc...@gmail.com>]

I dont understand why , if your AJAX is calling a url that is in the
controller
you process will have the same access as any other request call.
This works for sure, I tested it.
Regards
Tibor

On 9/18/06, Amit Shinde <am...@amicontech.com> wrote:
>
> Hello,
>         I was wondering if anyone has played with AJAX. I want to call a
> OFBiz
> service by making an XMLHttpRequest. I have a RequestHandler that is
> supposed to process this request. The problem I am facing is of
> HttpSession.
> Even though I am logged in, I get userLogin, dispatcher and delegator
> attributes null. Is there a way where we can get our HttpSession
> attributes
> from XMLHttpRequest. Do we need to do any special thing or is this just a
> limitation?
>
>         Without a valid HttpSession, I obviously cant run the service
> unless I pass
> userLoginId in the XMLHttpRequest and get UserLogin value through
> delegator.
> This approach will pose a security hazard nonetheless.
>
>         Any insight will be appreciated.
>
>
> Thanks in advance,
>
> Amit Shinde
>
>
>
>
>
>
>