Discussions
Session and Login Issues with Password Protected web store
Here are a few issues I have found with session management in the webstore:
1. Login to a secure password protected web store and nlobjContext will contain the user's customer record ID. Logout and the context still contains the user's customer record ID. Clear cache and history, Close the browser, reboot your machine, relaunch browser and context still contains the user's customer record ID. This is not good if user's share same computer but login under different customer records.
-update: 2013-Mar-29: This is still true.
2. Login and use nlobjContext.setSessionObject to save a session variable. Logout and view nlobjContext.getSessionObject and the variable is empty (that's good). Log back in and view nlobjContext.getSessionObject and the variable contains the value from the previous session (that's bad).