[SLING-1776] Caching should be disabled for /system/sling/info.sessionInfo(.json)

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Servlets Get 2.1.0
• Component/s: Servlets
• Environment: InternetExplorer
• Assignee: Justin Edelson
• Reporter: Clemens Wyss
• Created: 15/Sep/10 07:35
• Updated: 08/Oct/10 10:51
• Resolved: 15/Sep/10 15:46

Description

IE seems to cache the /system/sling/info.sessionInfo.json page/result.
If you perform an authentication in the browser and then gather the current session info through Sling.getSessionInfo the outdated info is returned instead.

Solution:
the following http header should be attached to the given url/resource:
Cache-Control : private, no-store, no-cache, max-age=0, must-revalidate

Additionally the Sling#getSessionInfor method in sling.js could make the URI unique by adding a time tag and hence preventing any browser from caching the result.
...
var res=Sling.httpGet(Sling.baseurl+"/system/sling/info.sessionInfo."new Date().getTime()".json");

...