05/04/2022
Given a UA Server with three endpoints, a Session has been created.
Is the session strictly tied to one endpoint?
If not, then does a session share all the endpoints User Token Policy? e.g. if a client sends a request with a Policy ID, should the server look for a match by iterating the Policy ID of all the endpoints?
Is there any point where this is discussed in the specifications or similar resources?
Thanks,
Alberto
05/30/2017
A session is a based on a SecureChannel between a client and server.
The secure channel can change but ActivateSession must be called again on the new SecureChannel.
Clients create a SecureChannel by connecting to one endpoint and negotiating keys.
If a connection is interrupted Clients can create a new SecureChannel with a different endpoint and call ActivateSession.
The PolicyIds are only valid within the EndpointDescription used by the Client to create SecureChannel.
The server has to know what EndpointDescription was used to create the SecureChannel and this information is provided by the stack.
1 Guest(s)