SOAP API session management

[Scott Taylor <vo...@yahoo.com>]

Anyone had to deal with session management when
providing a SOAP API to their application ?

We have developed a SOAP API for our core application.
 The application allows users to create accounts and
store contact information in the their accounts.

A customer of ours, who already has a large number of
users, wishes to provide our contact management
functionality to their users.

Our API allows the customer to log their users into
our contact management application via API calls and
then the customer's application makes calls to our API
to manage the logged in user's contacts.  

The problem we are having is that all API calls are
coming from the same machine, but for many different
users.  This makes using cookies for session
management  impossible.

Does anyone have any suggestions, or know of any
existing solutions to this problem ?

Thanks

voortrekker


__________________________________________________
Do You Yahoo!?
Yahoo! Auctions - Buy the things you want at great prices. 
http://auctions.yahoo.com/

RE: SOAP API session management

[Vijay Bhatt <vi...@biddersedge.com>]

Here is a simple workaround. You can pass a token as a field with every
request. The token, which can timeout just like a cookie, can initially be
obtained at login time as a response field. Its timeout interval can be
modified with every request to avoid timeout during processing. You can use
this from any browsers or workstations.

Hope this helps.

Thanks
Vijay

-----Original Message-----
From: Scott Taylor [mailto:voortrekkers@yahoo.com]
Sent: Wednesday, January 24, 2001 9:32 PM
To: soap-dev@xml.apache.org
Subject: SOAP API session management


Anyone had to deal with session management when
providing a SOAP API to their application ?

We have developed a SOAP API for our core application.
 The application allows users to create accounts and
store contact information in the their accounts.

A customer of ours, who already has a large number of
users, wishes to provide our contact management
functionality to their users.

Our API allows the customer to log their users into
our contact management application via API calls and
then the customer's application makes calls to our API
to manage the logged in user's contacts.

The problem we are having is that all API calls are
coming from the same machine, but for many different
users.  This makes using cookies for session
management  impossible.

Does anyone have any suggestions, or know of any
existing solutions to this problem ?

Thanks

voortrekker


__________________________________________________
Do You Yahoo!?
Yahoo! Auctions - Buy the things you want at great prices.
http://auctions.yahoo.com/