If there is a Session Token in your Application’s Session, send a SoapRequest to the CyberStore Connect session profile operation. This determines if the token is still valid.
See the example below:
Example SOAP Communication |
Copy Code
|
---|---|
If len (Session(“SessionToken”)) > 0 then WEBSERVICERESPONSE.Async = False SoapRequest.Open(“POST”, WEBSERVICEURL, False) SoapRequest.setRequestHeader(“Content-Type”, “application/x-www-form-urlencoded”) SoapRequest.Send(“ClientCode=” & CLIENTCODE & “&SessionToken=” & Session(“SessionToken”) & “&ClientSession_ID=” & Session.SessionID) |
In the request, send the ClientCode, the Token, and your application’s Session ID as ClientSession_ID to prevent session hijacking.