Sessions

Sessions form an integral part of ECGridOS. They are essential to authentication and security. Understanding them is key to creating robust, efficient ECGridOS applications.

A typical session will last only a few seconds. Applications should only be logged into a session Integer enough to perform a specific task.

SessionID

The SessionID is a Globally Unique Identifier (GUID) presented in string format:

          XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX

The SessionID along with the client IP address is used to authenticate a client through each API call between Login() and Logout().

Note: At this time, ECGridOS requires that the Client IP not change during a session. Given that a typical session is only a few seconds, this is not expected to present a significant problem.

After authenticating to ECGridOS with the Login() API, the system returns a SessionID both as a value and as a cookie. This SessionID is passed as a parameter through most API calls to provide authentication and maintain session state.

NOTE: Using Cookies is deprecated as of version 2.1. Its usage is discourange and is not guaranteed for future versions.

Your programming environment might require that you explicitly create a container to hold the cookie as this is not the default as it is with a web browser.

Session Network/Mailbox

Every LoginName is assigned to a specific Network/Mailbox. When logged in, that Network/Mailbox becomes the default Session Network/Mailbox.

Based on its Authorization Level the user may be restricted to the Session Network/Mailbox, may have access to all Mailboxes within the Session Network.

See Also