If there is a Session Token in your Application’s Session, send a SoapRequest to the CyberStore Connect session profile operation. This determines if the token is still valid.
See the example below:
| Example SOAP Communication |
Copy Code
|
|---|---|
If len (Session(“SessionToken”)) > 0 then
WEBSERVICERESPONSE.Async = False
SoapRequest.Open(“POST”, WEBSERVICEURL, False)
SoapRequest.setRequestHeader(“Content-Type”, “application/x-www-form-urlencoded”)
SoapRequest.Send(“ClientCode=” & CLIENTCODE & “&SessionToken=” & Session(“SessionToken”) & “&ClientSession_ID=” & Session.SessionID)
|
|
In the request, send the ClientCode, the Token, and your application’s Session ID as ClientSession_ID to prevent session hijacking.