Session IDs should be hashed instead displaying actual value

[michaelwechner]

One can have a look at the current sessions, e.g.

http://127.0.0.1:8080/yanel/from-scratch-realm/yanel/session-manager.html

but for security reasons we don't want to display the actual session IDs, hence we should hash the IDs inside

src/resources/sessionmanager/src/java/org/wyona/yanel/impl/resources/sessionmanager/SessionManagerResource.java

[csstaub]

I don't see why we should display any IDs in the first place (plain or hashed). What's the point of having them in the interface?

[michaelwechner]

Good point, but we quite probably need it to generate notifications between administrator and individual user.

[csstaub]

Implemented some simple hashing

[csstaub]

Requires commons-codec 1.4 to be present, pushed into master branch

[michaelwechner]

Thanks very much.