Session problem in cxml Punchout in Struts2 Java -


we have created punchout(cxml punchout) supplier site integrates ariba. working fine when tried in google chrome frames environment keeps on losing session in ie same frames environment. when pass jsessionid url worked start page. if navigate using other links started losing session. took login page though jsessionid being passed navigation links.

this site built in java struts2 frame work. using jboss v 5.1 server , apache.

how can retain session throughout punchout process?

session issue in punchout solve using p3p policy in apache, in ie third party cookies being blocked make them unblock browser need configure in web server , bit in page header.

setheader in apache config file. ===>

header set p3p "policyref=\"example.com/w3c/p3p.xml\", cp=\"idc dsp cor adm devi taii psa psd ivai ivdi coni our ind cnt\"" 

also can place setheader or addheader code in masterpage of project (optional)

before create p3p.xml file (using below sample or u can use generator tool) , deploy it.

sample p3p.xml:

<?xml version="1.0" encoding="utf-8" ?> <!-- generated http://www.webentrust.com on 05/25/2011 --> <meta xmlns="http://www.w3.org/2002/01/p3pv1">      <policy-references>         <policy-ref about="#policy">             <include>/*</include>         </policy-ref>     </policy-references>      <policies xmlns="http://www.w3.org/2002/01/p3pv1">         <expiry max-age="604800"/>         <policy name="policy" discuri="http://www.example.com/privacy.html" opturi="http://www.example.com/contact.html">             <entity>                 <data-group>                     <data ref="#business.name">example.com</data>                     <data ref="#business.contact-info.online.email">privacy@example.com</data>                 </data-group>             </entity>             <access>                 <all/>             </access>             <disputes-group>                 <disputes resolution-type="service" short-description="privacy disputes" service="http://example.com/contact.html">                     <remedies>                         <correct/>                     </remedies>                     <long-description>we correct privacy issues.</long-description>                 </disputes>                 <disputes resolution-type="independent" short-description="web entrust" service="http://www.webentrust.com/sites/example.com.html">                     <remedies>                         <correct/>                     </remedies>                     <long-description>web entrust provides several active seals represent increased trust, privacy , security. public reviews provide accountability through open review policy.</long-description>                     <img alt="web entrust site seals" src="http://www.webentrust.com/seals/trusted/example.com.png"/>                 </disputes>             </disputes-group>             <statement>                 <consequence>web server logs maintained web-site.</consequence>                 <extension optional="yes">                     <statement-group name="logging" xmlns="http://www.w3.org/2006/01/p3pv11"/>                 </extension>                 <purpose>                     <current/>                     <admin/>                     <develop/>                     <pseudo-analysis/>                     <pseudo-decision/>                     <tailoring/>                 </purpose>                 <recipient>                     <ours/>                 </recipient>                 <retention>                     <business-practices/>                 </retention>                 <data-group>                     <data ref="#dynamic.clickstream"></data>                     <data ref="#dynamic.clientevents"></data>                     <data ref="#dynamic.http"></data>                     <data ref="#dynamic.searchtext"></data>                 </data-group>             </statement>         </policy>     </policies> </meta> 

for more details:

  1. http://www.p3pwriter.com
  2. accessing domain cookies within iframe on internet explorer internet-explorer
  3. https://stackoverflow.com/users/13002/sleep-deprivation-ninja
  4. http://msdn.microsoft.com/en-us/library/ms537343.aspx
  5. cookie blocked/not saved in iframe in internet explorer

to validate privacy policy xml file :

1.http://www.w3.org/p3p/validator.html


Comments

  1. It's interesting to read blog about punchout cxml.
    Punchout CXML

    ReplyDelete
  2. cXML PunchOut - Commerce extensible markup language application who is a protocol created by Ariba used to communicate between sessions across the internet.
    Commerce Extensible Markup Language Punchout

    ReplyDelete

Post a Comment

Popular posts from this blog

Cursor error with postgresql, pgpool and php -

c# - how to write client side events functions for the combobox items -

ssh client with paramiko (python) -