crossbario / crossbar

Crossbar.io - WAMP application router
https://crossbar.io/
Other
2.05k stars 275 forks source link

INVOCATION request ID is not session scope #2081

Open ecorm opened 1 year ago

ecorm commented 1 year ago

The WAMP spec mandates that INVOCATION.Request be a session scope ID. However, in Crossbar the same ID generator is used by the Dealer class for all callee sessions. See https://github.com/crossbario/crossbar/blob/03d7057ee18a0d1e59b33bf1633ee246c1cf908a/crossbar/router/dealer.py#L955

If generating INVOCATION request IDs on a per-session basis is deemed too costly, then it's the WAMP spec that should changed to loosen those requirements.