Any java code samples for session management in OSWAP ESAPI?

Question

The documentation provided in ESAPI for Java is incomplete. Does anyone have operational code samples to share for session management?

P.S.: Other code samples explaining where and how to start with ESAPI would be welcome too. Thanks.

Answer 1

I think your best bet for examples would be to 1) look at the JUnit tests for the session manangement, and 2) the relevant portions of 'Swingset' (http://code.google.com/p/owasp-esapi-java-swingset/) or 'Swingset Interactive' (http://code.google.com/p/owasp-esapi-swingset-interactive/).

That said, the ESAPI dev team knows that most of the ESAPI docs are woefully inadequate and are seeking volunteers to pick in and help make them usable.

-kevin