Question

I have few basic questions on session management in GWTP.

Client : GWTP, Server – Restful WebServices using Guice and Jersey.

Application session management is straightforward when i have the backend service with RPC mechanism. But, With GWT client running on android and server side logic exposed as Restful Web services using Jersey, how do we maintain session because Restful WS are stateless. Now how do we achieve user session in this case?

Answer 1

Regarding session management there is no difference whether you use GWT's RPC, RequestFactory or RequestBuilder.

Communication in the web is basically stateless regardless of the communication protocol you are using.
Traditionally session management is done via server side sessions.
However RESTfull services are not supposed to rely on server side sessions as it violates restful principle.
So basically there are two ways to do it:

1. If you don’t care much about violating the restful principles you can deploy server side sessions (see here for more details).
2. use OAuth (https://wikis.oracle.com/display/Jersey/OAuth)
3. somehow pass the credentials/securityToken for every request to your backend. You can probably do that by using GWTP’s ClientActionHandlers.