Define relationship between HttpSession and Web Socket Sessions. about websocket HOT 7 CLOSED

• Issue Imported From: https://github.com/javaee/websocket-spec/issues/5
• Original Issue Raised By:@glassfishrobot
• Original Issue Assigned To: @pavelbucek
• Original Issue Closed By:@glassfishrobot

from websocket.

@glassfishrobot Commented
Reported by dannycoward

from websocket.

@glassfishrobot Commented
dannycoward said:

1. The only association between websocket session and HttpSession is at opening handshake time. The API gives developers a convenient access to the HttpSession object at that point in time.
2. The user identity associated with the websocket Session is the user identity that was established at the opening handshake.
3. If the server decides that authorization for this websocket resource by this user identity has ended (it expired, or some logout mechanism was invoked) then the websocket implementation must immediately close the connection.

(from my read of the websocket spec, the most suitable close code for the latter is 1008).

from websocket.

@glassfishrobot Commented
dannycoward said:
This has been updated in v010 of the spec, per my comment.

from websocket.

@glassfishrobot Commented
Was assigned to dannycoward

from websocket.

@glassfishrobot Commented
This issue was imported from java.net JIRA WEBSOCKET_SPEC-5

from websocket.

@glassfishrobot Commented
Marked as fixed on Thursday, December 13th 2012, 3:19:00 pm

from websocket.