Creating an HTTP session

Sessions can be created using the SessionID option in the sa_set_http_option system procedure. The session ID can be defined by any non-null string.

Session state management is supported by URLs and cookies. HTTP sessions can be accessed using HTTP cookies, or through the URL of a GET request or from within the body of a POST (x-www-form-urlencoded) request. For example, the following URL utilizes the XYZ database connection when it executes:

http://localhost/sa_svc?SESSIONID=XYZ

The request is processed as a standard session-less request if an XYZ database connection does not exist.

Example

The following code illustrates how to create a RAW web service that creates and deletes sessions. A connection scope variable named request_count is increment each time an HTTP request is made while specifying a valid SessionID.

create service "session"
    type 'raw'
    authorization off
    user DBA
    as call sp_session();

create or replace procedure sp_session()
begin
    declare body long varchar;
    declare sesid long varchar;
    declare newsesid long varchar;
    declare createtm timestamp;
    declare lastaccesstm timestamp;

    select connection_property('sessionid') into sesid;
    if HTTP_VARIABLE('delete') is not null then
        call sa_set_http_option('SessionID', null );
        set body = '<html><body>Deleted ' || sesid
            || '</BR><a href="http://localhost/session">Start Again</a>';
        select body;
    end if;
    if sesid = '' then
        set newsesid = set_session();
        create variable request_count int;
        set request_count = 0;

        set body = '<html><body> Created sessionid ' || newsesid
            || '</BR><a href="http://localhost/session?SessionID=' || newsesid || '"> Enter into Session</a>';
    else
        select connection_property('sessionid') into sesid;

        set request_count = request_count +1;
        select connection_property('sessioncreatetime') into createtm;
        select connection_property('sessionlasttime') into  lastaccesstm;
        
        set body = '<html><body>Session ' || sesid || '</BR>'
            || 'created ' || createtm || '</BR>'
            || 'last access ' || lastaccesstm || '</BR>'
            || '<H3>REQUEST COUNT is '|| request_count || '</H3><HR></BR>'
            || '<a href="http://localhost/session?SessionID=' || sesid || '"> Enter into Session</a></BR>'
            || '<a href="http://localhost/session?SessionID=' || sesid || '&delete"> Delete Session</a>';
    end if;

    select body;
end;

For more information about the set_session function implementation, see Using the URL to manage a session.

Using the URL to manage a session
Using cookies to manage a session

Discuss this page in DocCommentXchange.