[wsrp-wsia] [I#170] Scope of Producer-Consumer HTTP session

Issue: 170
Status: Active
Topic: 
interface
Class: Minor_Technical
Raised by: Yossi Tamari
Title: Scope 
of Producer-Consumer HTTP session
Date Added: 4-Dec-2002
Document 
Section:   v0.85/3.13
Description:
In the Transport Issues section of the spec it 
says: "Consumers that manage transport layer issues, such as cookies, MUST 
return them to the Producer only for subsequent invocations using the same 
userContext.".
However, since the 
userContext may change because the user's role/profile has changed, but he is 
still in the same session, so the same cookie should still be sent. On the other 
hand, the user may have logged out of his portal (closed his browser) and logged 
in again, but normally his user context hasn't changed. In this case there 
should be no requirement to send the cookie (it is a new user session, and a new 
load-balanced instance may be used).
I think the scoping here should be to 
the consumer's concept of user-session rather than to the 
userContext.

Gil Tayar

WebCollage