diff --git a/datastore_server/source/java/ch/systemsx/cisd/openbis/dss/generic/server/AbstractDatasetDownloadServlet.java b/datastore_server/source/java/ch/systemsx/cisd/openbis/dss/generic/server/AbstractDatasetDownloadServlet.java index 99db2b39e0ccc43d0167810ba3a94bde251693b8..d56affdfb98373c1a5de514438d2716339f46f02 100644 --- a/datastore_server/source/java/ch/systemsx/cisd/openbis/dss/generic/server/AbstractDatasetDownloadServlet.java +++ b/datastore_server/source/java/ch/systemsx/cisd/openbis/dss/generic/server/AbstractDatasetDownloadServlet.java @@ -49,8 +49,7 @@ import ch.systemsx.cisd.openbis.generic.shared.basic.dto.AbstractExternalData; import ch.systemsx.cisd.openbis.generic.shared.basic.dto.DatabaseInstance; /** - * Superclass for dataset download servlets. Provides functionality to deliver content of files and - * images, does not deal with browsing directories. + * Superclass for dataset download servlets. Provides functionality to deliver content of files and images, does not deal with browsing directories. * * @author Tomasz Pylak */ @@ -128,8 +127,7 @@ abstract public class AbstractDatasetDownloadServlet extends HttpServlet } /** - * Do any additional initialization using information from the properties passed in. Subclasses - * may override. + * Do any additional initialization using information from the properties passed in. Subclasses may override. */ protected synchronized void doSpecificInitialization(Enumeration<String> parameterNames, ServletConfig servletConfig) @@ -159,6 +157,7 @@ abstract public class AbstractDatasetDownloadServlet extends HttpServlet if (session == null) { session = request.getSession(true); + session.setAttribute("openbis-session-id", sessionIdOrNull); ConfigParameters configParameters = applicationContext.getConfigParameters(); session.setMaxInactiveInterval(configParameters.getSessionTimeout()); @@ -169,7 +168,8 @@ abstract public class AbstractDatasetDownloadServlet extends HttpServlet appendServletSessionTimeout(sb); operationLog.info(sb.toString()); } - if (applicationContext.getSessionTokenCache().isValidSessionToken(sessionIdOrNull) == false) + + if (applicationContext.getSessionTokenCache().isValidSessionToken(session.getAttribute("openbis-session-id").toString()) == false) { return null; }