topic Re: Does Nuxeo CMIS send HTTP Cookies to accelerate authentication for subsequent calls? in Nuxeo Forum

Does Nuxeo CMIS send HTTP Cookies to accelerate authentication for subsequent calls?

ron_1 — Fri, 28 Sep 2012 14:51:25 GMT

According to http://chemistry.apache.org/java/how-to/how-to-connect.html, some repositories send HTTP Cookies to accelerate authentication for subsequent calls. Is this true of Nuxeo?

Re: Does Nuxeo CMIS send HTTP Cookies to accelerate authentication for subsequent calls?

Florent_Guillau — Fri, 28 Sep 2012 15:19:54 GMT

Yes, if on subsequent requests you pass the JSESSIONID cookie you received in the login response, then the server-side HTTP session should be reused and reauthentication bypassed.

Edit: this is wrong, see other answer.

Re: Does Nuxeo CMIS send HTTP Cookies to accelerate authentication for subsequent calls?

Florent_Guillau — Wed, 27 Nov 2013 15:42:15 GMT

Ok the other answer is wrong. The CMIS bindings don't use HTTP sessions so don't return a JSESSIONID cookie. Please see http://answers.nuxeo.com/questions/6456/cmis-workbench-with-cookies-enabled-logs-into-nuxeo-every-time for more.