RE: [wsrp] Errata on Cookie Protocol perUser

Cookies are not very clear.  There are three areas of cookies that need
clarification:

a) Lifetime of cookies
If cookie is not persistent, then it is tied to the consumer's session.  If
cookie is persistent, the cookies life time is governed by its expiration by
is also tied to the producer registration or pseudo registration in the case
in which a registration was not formally made.

b) When cookies are passed to the producer/resource
For WSRP web service calls, the path of the end point implementing the WSRP
interface is used.
For resource requests, the path of the resource is used for out-of-bounds
resource requests.

c) When initCookie is called
Per consumer session for perUser protocol.  Per consumer session per user
per group for perGroup protocol.  The producer should not make any
assumptions of the consumer's session and how it relates to users.

Nader

-----Original Message-----
From: Nathan Lipke [mailto:] 
Sent: Tuesday, February 23, 2010 11:40 AM
To: WSRP
Subject: [wsrp] Errata on Cookie Protocol perUser

http://wiki.oasis-open.org/wsrp/WSRP_v2_Errata

See #5.

Please review this. We can discuss it and hopefully vote on it during
Thursday's call.

Thanks

Nate
---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail.  Follow this link to all your TCs in OASIS at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php