AMF Login DuplicateSessionDetected
- Dominant language
- ActionScript
- Stars
- 380
- Forks
- 120
- PR merge metrics
- No merged PRs in 30d
Description
I am trying to create a proof of concept that will maybe get me a job in porting a AIR/Flex project. Trying to login to the server gives a Duplicate Session error. Here is the Royale code:
```
```
Here is my asconfig:
```
{
"compilerOptions": {
"targets": [
"JSRoyale"
],
"source-path": [
"src"
]
},
"additionalOptions": "+configname=flex",
"mainClass": "Main"
}
```
I am starting chrome like this bypass CORS errors:
`chrome.exe --user-data-dir="C://chrome-dev-disabled-security" --disable-web-security --disable-site-isolation-trials`
I get this response:
Duplicate HTTP-based FlexSession error: A request for FlexClient '585E2208-67F8-C428-0452-65840DD101A8' arrived over a new FlexSession 'ECD144ED710A291AE3E5C1D17560B501', but FlexClient is already associated with FlexSession '42A03B06B6FA9FED2AC03F7B3E14DB73', therefore it cannot be associated with the new session.
Loging at network trafic I see 3 requests all with diferent JSSESSIONID:

Any help in solving this is much appreciated, thank you
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the Royale code in the issue, especially SecureAMFChannel, RoyaleClient.id, ChannelSet, and the /RiaService/messagebroker/amflongpolling endpoint. Reproduce the login while inspecting the three network requests and their differing JSSESSIONID values, then trace how FlexClient and FlexSession are associated. Done means identifying whether the duplicate-session response comes from the client setup or the server interaction and documenting a verified fix.
Written by the indexing model from the issue text.
Assessment
- Domain
- api, authentication
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100