aspose file tools*
The moose likes JSP and the fly likes Prevent multiple login to web app Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Java » JSP
Bookmark "Prevent multiple login to web app" Watch "Prevent multiple login to web app" New topic
Author

Prevent multiple login to web app

Atul Mishra
Ranch Hand

Joined: Jun 08, 2006
Posts: 140
All,

I have to prevent multiple user logins to my web application developed in Struts running in tomcat.

This is the situation:
User A logs in application and proceeds to application page. Now if User A opens another IE window and tries to login, he shouldnt be allowed to login again. How can I achieve this ?

I tried using istokenvalid,savetoken etc. But this approach doesnt work if the user opens a new IE from task bar and also refresh also fails here[I understand its meant to hide refresh capability].
How else can i achieve this ?

Thanks,Atul
[ March 29, 2007: Message edited by: Atul Mishra ]
Purushoth Thambu
Ranch Hand

Joined: May 24, 2003
Posts: 425
Atul, Did you search javaranch for this question? It's been asked before. In short you don't have easy way. You either to have use some sort of persistence to store the active sessions and search them before creating a new session or you can use JMX to query the active sessions (which will be costly when compared to persistence technique). If you search further you will find more details. Struts as far as I know doesn't provide this logic. This is more of JSP question.
[ March 26, 2007: Message edited by: Purushothaman Thambu ]
Atul Mishra
Ranch Hand

Joined: Jun 08, 2006
Posts: 140
Thanks.. I will search in JSP forum,

Also moderators.... can anyone please move this to JSP Forum..

Thanks
Atul Mishra
Ranch Hand

Joined: Jun 08, 2006
Posts: 140
All,

I read about this in Javaranch archives.

Basically I have different scenarios:
1, User logegd in and opens a new window from "windows task bar", thereby opening a new sessionid. I tried the approach of using Maps here. it works. Is that the preferred approach here or using HttpSessionListener is the preferred approach ?

I need some more links with using httpsessionlistener, my serach didnt give me much

How about cntrl+n or file-new-open window.
I have login.jsp which takes users to second page-results.jsp, In this page "refresh" should be available, but cntrl+n shouldnt be ? Can we handle it ?

I read a post of using timestamps with cntrl+n but that can catch "Refresh" button also. So please suggest some help

Thanks
Ben Souther
Sheriff

Joined: Dec 11, 2004
Posts: 13410

Originally posted by Atul Mishra:
Thanks.. I will search in JSP forum,

Also moderators.... can anyone please move this to JSP Forum..

Thanks


A.) You'll find more on this subject in the Servlets forum than anywere else on this site. (Perform a search with my name and "reliable" as keywords)

B.) Since you're asking about a Struts specific solution, our Struts forum would be the best place to move this thread.

Let me know if you want this thread moved to Struts.


Java API J2EE API Servlet Spec JSP Spec How to ask a question... Simple Servlet Examples jsonf
Atul Mishra
Ranch Hand

Joined: Jun 08, 2006
Posts: 140
Ben,

I originally posted this in Struts, I dont need a strts specific solution, Its a general solution for any jsp/servlets. It would be nice to remove "struts" from my heading also.

Thanks,
Atul
Bear Bibeault
Author and ninkuma
Marshal

Joined: Jan 10, 2002
Posts: 61648
    
  67

Originally posted by Atul Mishra:
It would be nice to remove "struts" from my heading also.


Then go ahead. You can edit your own entries by clicking the .


[Asking smart questions] [Bear's FrontMan] [About Bear] [Books by Bear]
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: Prevent multiple login to web app