Cookies are not very clear. There are three areas of cookies that need
a) Lifetime of cookies
If cookie is not persistent, then it is tied to the consumer's session. If
cookie is persistent, the cookies life time is governed by its expiration by
is also tied to the producer registration or pseudo registration in the case
in which a registration was not formally made.
b) When cookies are passed to the producer/resource
For WSRP web service calls, the path of the end point implementing the WSRP
interface is used.
For resource requests, the path of the resource is used for out-of-bounds
c) When initCookie is called
Per consumer session for perUser protocol. Per consumer session per user
per group for perGroup protocol. The producer should not make any
assumptions of the consumer's session and how it relates to users.
From: Nathan Lipke [mailto:nath...@oracle.com]
Sent: Tuesday, February 23, 2010 11:40 AM
Subject: [wsrp] Errata on Cookie Protocol perUser