Hello Just a question not a problem slightly smiling face I kotlinlang #ktor

Hello ! Just a question not a problem :slightly_sm...

vincent.brule

07/17/2018, 9:41 AM

Hello ! Just a question not a problem 🙂 I use session feature with header. When I inspect my request, I have my header who is send but for each request ktor send another header different than mine, why please ?

✅ 1

Deactivated User

07/17/2018, 9:44 AM

who is the client? a browser? or a ktor http client?

vincent.brule

07/17/2018, 9:46 AM

The client is a react app. For example, when I do a request to take all the users, I send my header and ktor respond with another ktor while I put any code doing that…

vincent.brule

07/17/2018, 9:46 AM

For example i send this header 004313337815f3792666ed0ee3045238/590157af1a087e8743faf99ec138935ff01993c4c83d4f9ca62fefb22e02feff03c4533c5f23a661970f838cd36773648558dd56f1280c47b611aabc19fbedab32a2587510197ee8504a5bf536a27763552637597d2d2700d0563f27a210a462:626ffb8d962c9d3ca8c2a30d7bddc6f018892223717885f099061cbe8beee711

vincent.brule

07/17/2018, 9:47 AM

and ktor respond with this : aaa770ad07ace931c01e02663a3f91dd/f864c77dee8413b006747a7011935edebd730712caab3372bab8ed8b90603d6a776eb81bb23c95f12f1d8979608adb013f1c6e9381f6b6bf5aeab90fbdd4ffc930bb03011c0913895382d1b5d766a0028a24329f3a12a8900b71c63d4f15712e:626ffb8d962c9d3ca8c2a30d7bddc6f018892223717885f099061cbe8beee711

vincent.brule

07/17/2018, 9:47 AM

just the end is similar

Deactivated User

07/17/2018, 9:47 AM

oh I see

Deactivated User

07/17/2018, 9:47 AM

yeah, that’s normal I guess

Deactivated User

07/17/2018, 9:47 AM

that’s because you are using client-side sessions

Deactivated User

07/17/2018, 9:47 AM

if the session content has changed

Deactivated User

07/17/2018, 9:47 AM

the returned header is different

vincent.brule

07/17/2018, 9:47 AM

Yes I use client side

Deactivated User

07/17/2018, 9:47 AM

if you want it to be constant

vincent.brule

07/17/2018, 9:48 AM

But why ktor returns an header for each request ?

Deactivated User

07/17/2018, 9:48 AM

you should use server-side sessions

vincent.brule

07/17/2018, 9:48 AM

I just want to have an header when I authenticate but not after

Deactivated User

07/17/2018, 9:48 AM

well that’s what the session feature is for

Deactivated User

07/17/2018, 9:48 AM

a session is used to keep information across requests

Deactivated User

07/17/2018, 9:49 AM

so it always return the new session

Deactivated User

07/17/2018, 9:49 AM

it’s the expected behaviour

vincent.brule

07/17/2018, 9:49 AM

But the informations are the same, I just put email and a TTL inside so why the header change please ?

vincent.brule

07/17/2018, 9:49 AM

So the TTL is updated for each request ?

Deactivated User

07/17/2018, 9:49 AM

how are you configuring the session feature?

vincent.brule

07/17/2018, 9:50 AM

this.sessions.set(AnniaSession(responseJson.id, responseJson.email, formatDate.format(Date())))

vincent.brule

07/17/2018, 9:51 AM

install(Sessions) { header<AnniaSession>(“ANNIA_SESSION”) { transform(SessionTransportTransformerEncrypt(secretEncryptKey, secretAuthKey)) //Use AES and HmacSHA256 } }

vincent.brule

07/17/2018, 9:52 AM

the responseJson come from google auth

Deactivated User

07/17/2018, 9:52 AM

well you are doing

Deactivated User

07/17/2018, 9:52 AM

formatDate.format(Date()))

Deactivated User

07/17/2018, 9:52 AM

the Date changes everytime

Deactivated User

07/17/2018, 9:52 AM

and since you are using AES, the whole payload would change for a single changed bit

vincent.brule

07/17/2018, 9:53 AM

Ok so I need to put the TTL in a variable and after set the session ?

Deactivated User

07/17/2018, 9:54 AM

no matter where you do it, if you set the sesssions.set with different values, it will change everytime

Deactivated User

07/17/2018, 9:54 AM

if you don’t want the header to change and need to mutate stuff, you should use server-side sessions

vincent.brule

07/17/2018, 9:54 AM

Ys but I call session set just when The user authenticate and not after so why ktor call .set for each request ?

vincent.brule

07/17/2018, 9:54 AM

No it’s not a problem I just try to understand why 🙂

Deactivated User

07/17/2018, 9:55 AM

are you sure you are not changing it?

Deactivated User

07/17/2018, 9:55 AM

for testing purposes I suggest you

Deactivated User

07/17/2018, 9:55 AM

to remove the sessiontransformer

Deactivated User

07/17/2018, 9:55 AM

remove the AES

Deactivated User

07/17/2018, 9:55 AM

and you will be able to see the content

Deactivated User

07/17/2018, 9:55 AM

and discover why it is changing

vincent.brule

07/17/2018, 9:55 AM

I will try thanks

👍 1

vincent.brule

07/17/2018, 9:58 AM

I just try, it’s exactly the same informations…

Deactivated User

07/17/2018, 9:58 AM

so without AES

Deactivated User

07/17/2018, 9:58 AM

it doesn’t change?

vincent.brule

07/17/2018, 9:59 AM

Yes, I have exactly the same text but with AES I don’t have the same..

Deactivated User

07/17/2018, 9:59 AM

https://github.com/ktorio/ktor/blob/master/ktor-server/ktor-server-core/src/io/ktor/sessions/SessionTransportTransformerEncrypt.kt

Deactivated User

07/17/2018, 9:59 AM

everytime it is generated

Deactivated User

07/17/2018, 9:59 AM

it uses a different secure seed

Deactivated User

07/17/2018, 10:00 AM

I’m recalling now. It is done so the client doesn’t know if the session has changed or not

Deactivated User

07/17/2018, 10:00 AM

if you don’t want this to happen

Deactivated User

07/17/2018, 10:00 AM

you can set your own ivGenerator

Deactivated User

07/17/2018, 10:00 AM

and return something constant

Deactivated User

07/17/2018, 10:01 AM

not sure if a good idea

vincent.brule

07/17/2018, 10:02 AM

No it’s good to change, I just would know why 🙂 Thank you very much for the explications, have a good day !

Deactivated User

07/17/2018, 10:02 AM

okay 🙂 glad to be able to help you! have a nice day you too!

Open in Slack

Previous Next