[Zope] why two session identifiers?

[Chris McDonough]

There is a "browser id".  This is the id assigned to the user's
browser.   It is stored in the cookie that is set on the user's
browser (if you use cookies in sessioning). You can obtain this
value by using REQUEST.SESSION.getContainerKey() or
REQUEST.SESSION.getBrowserIdManager().getBrowserId().  It uniquely
identifies a single browser.

There is a "session id".  This is the id assigned to a user's
session data object.  You can obtain this value by using
REQUEST.SESSION.getId().  This identifier uniquely identifies a
single session by a browser.

A session (and therefore a session id) lasts until the session times
out due to inactivity, typically after 20 minutes of inactivity.
However, a browser id can last for almost as long as you want.  For
example, if you use cookies, you could have the sessioning machinery
cookie timeout set to 2038 or something, and assuming the user never
clears his cookies, and uses the same machine until 2038, he will
always have the same browser id.  During his visits to the site,
however, he will have many sessions, each with its own id.

The session id is not stored or seen on the client in any way, just
the browser id.

HTH,

- C






----- Original Message -----
From: "Mario Bianchi" <kammamuri_mb@hotmail.com>
To: <zope@zope.org>
Sent: Monday, August 05, 2002 12:40 PM
Subject: [Zope] why two session identifiers?


> Dear list,
> could anybody tell me why the Session product assigns a session id
AND a
> session token to a session?
> I've noticed that expiration of the session data object causes (on
a further
> request) the session id to change, while the token stays the same:
any
> explications?
>
> Thanks,
> Mario.
>
> _________________________________________________________________
> MSN Photos is the easiest way to share and print your photos:
> http://photos.msn.com/support/worldwide.aspx
>
>
> _______________________________________________
> Zope maillist  -  Zope@zope.org
> http://lists.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists -
>  http://lists.zope.org/mailman/listinfo/zope-announce
>  http://lists.zope.org/mailman/listinfo/zope-dev )
>