AJAX, Portlets and CAS

[Jason Shao]

On May 17, 2007, at 9:44 AM, Mark McLaren wrote:

> For information, my AJAX enabled portlet appears to be working well  
> in IE6 also.
>
> Jason, I am very curious about what the circumstances are that require
> cookie manipulation for AJAX to work in IE6?

Mark,

We were doing something a little different -- using an XHR to send an  
AJAX keepalive while you are composing mail in our email channel. As  
a result, we needed to ensure that the XHR was using the same  
JSESSIONID cookie, so that the server-session for the portal got  
extended. If I remember correctly (been a couple years) the IE  
process model has interesting implications for whether or not cookies  
are visible across processes & windows -- which seemed to also  
translate over to XHR objects. I think we worked around it by  
manually setting cookie headers when we sent the AJAX pings.

I wonder that your sessions are different -- do you see a full round- 
trip to the CAS server and a TGT SSO login? Not sure why your XHR  
would have access to the TGT and not the JSESSIONID though.

Jason

--

Jason Shao
Application Developer
Office of Instructional & Research Technology
Rutgers University
v. 732-445-8726 | f. 732-445-5539 | jayshao at rutgers.edu


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20070520/ee281992/attachment.html