Same session in diffrent browser tab problem

Question

Hello;
I am having a problem (might be browsers claim it a feature) that my application shares the same session if I use to access it from different tabs of a browser.
I have googled but could not find out any work around for it.
I want to restrict the user if he wants to access my application from another tab. Server identifies the user by session cookie generated by browser itself which kept same in all tabs. So is there any programmatic way that I be able to handle this situation. I want to catch the user at Filter level and redirect to a message page.
Your comments...
-Tahir
Edited by: tahirakram on Jul 3, 2008 10:54 AM

Answer 1

tahirakram wrote:
Karanjit wrote:
a) While displaying login page, check if the user has already logged in. If so, redirect the page to one that gets displayed when user successfully logs on avoiding mutiple logins.
b) In login authenication process, add a logic to check whether another user has already logged in and display so in the screen.Dear Karanjit;If user want to make multiple logins by opening multiple ie browsers. Then in this case every time session id will be unique and I have no problem with this case.
My issue is to implement such logic from where I can generate seprate session id from every tab/or landing user to a message page. <session id same in all tabs of a browser window>
As I disussed above there is a solution in ASP.net aka sessionless cookies [http://msdn.microsoft.com/en-us/library/aa479314.aspx#cookieless_topic2|http://msdn.microsoft.com/en-us/library/aa479314.aspx#cookieless_topic2]
You mean cookieless sessions. Cookieless sessions are not what you are asking. You can do the same here by setting the <Context> elements cookie attribute to false, and making sure you pass all URLs through response.encodeURL(String).
This doesn't help your cause, though, because if a user presses a link on your page with the CTRL key down, a new tab opens with the same session tracking info. Or if the user copies the URL in one tab and pastes it into another tab you get the same session in multiple tabs.
>
Now the question is, How can I achieve sessionless cookies in java? And the approach will work same as ASP.net works.The approach that you point to does not address the issue at all. In fact it makes it easier to use the same session in multiple windows, not just multiple tabs.
>
thanks