COOKIE BASED SESSION MANAGEMENT

摘要

An enterprise software system access manager saves cookies for users' sessions on client devices but creates server-side sessions on the fly when needed for the users to access certain features, when there is a constraint on the client device, or due to application policies. The server-side session objects can have references to the client-side cookies and can have key-value pairs added to them instead of the associated cookie.

主权项

1. A method for managing user sessions in an enterprise environment, the method comprising:
generating, with one or more computer systems, a session cookie maintaining data related to a session of a client device in an enterprise environment; sending the session cookie to the client device instructing the client device to store the session cookie; receiving, at the one or more computer systems, a request from a user to access a feature of an application on the enterprise environment; determining, with one or more processors associated with the one or more computer systems, whether the feature requires a server-side session; instantiating, with the one or more processors associated with the one or more computer systems, a server-side session object for the user in response to the request when the feature requires a server side session; updating, with the one or more processors associated with the one or more computer systems, the server-side session object with a reference to the session cookie on the client device; generating with the one or more processors associated with the one or more computer systems, a response to the request based on accessing the feature using the server-side session object; and sending the response to the client device.