Ibm mobilefirst Mobilefirst使用数据电源直接更新LTPA身份验证，错误SESN0008E

我们使用LTPA令牌和数据电源实现了MobileFirst安全性。 Mobilefirst版本是7.0.0.00.20150729-1801。 DataPower 7.1.0.4

用户身份验证和用户会话运行正常

直接更新会出现问题：应用程序上会出现更新警报，但按下更新按钮后，会出现更多警报，并显示更新失败的错误消息

Mobilefirst/Liberty日志文件上的错误为：

SESN0008E: a user authenticated as anonymous has attempted to access a session owned by ...

LTPA令牌似乎丢失了。 android应用程序logcat是：

01-08 10:36:14.645: D/WL_DIRECT_UPDATE_MANAGER(17035): DirectUpdateManager.startUpdate.onDirectUpdateSuccess: {"totalSize":9833,"operation":"start"}
01-08 10:36:14.665: D/Dialog(17035):  checkMirrorLinkEnabled returns : false
01-08 10:36:14.665: D/WL_DIRECT_UPDATE_CHALLENGE_HANDLER(17035): defaultListener.onStart: totalSize=9833
01-08 10:36:14.665: D/Dialog(17035): showing allowed
01-08 10:36:14.675: D/ProgressBar(17035): setProgressDrawable drawableHeight = 0
01-08 10:36:14.685: D/com.worklight.androidgap.directupdate.WLDirectUpdateDownloader(17035): WLDirectUpdateDownloader.downloadZipFile in WLDirectUpdateDownloader.java:144 :: Starting fresh download since app was changed on the server since last download attempt
01-08 10:36:14.735: W/PluginManager(17035): THREAD WARNING: exec() call to WLDirectUpdatePlugin.showProgressDialog blocked the main thread for 71ms. Plugin should use CordovaInterface.getThreadPool().
01-08 10:36:14.795: D/ProgressBar(17035): updateDrawableBounds: left = 0
01-08 10:36:14.795: D/ProgressBar(17035): updateDrawableBounds: top = 0
01-08 10:36:14.795: D/ProgressBar(17035): updateDrawableBounds: right = 405
01-08 10:36:14.795: D/ProgressBar(17035): updateDrawableBounds: bottom = 30
01-08 10:36:14.795: D/ProgressBar(17035): updateDrawableBounds: mProgressDrawable.setBounds()
01-08 10:36:14.885: D/com.worklight.androidgap.directupdate.WLDirectUpdateDownloader(17035): WLDirectUpdateDownloader.downloadZipFile in WLDirectUpdateDownloader.java:151 :: The server returned file different than expected application update zip file
01-08 10:36:14.905: D/com.worklight.androidgap.directupdate.WLDirectUpdateDownloader(17035): WLDirectUpdateDownloader.downloadZipFile in WLDirectUpdateDownloader.java:152 :: Response Data: Error 500: com.ibm.websphere.servlet.session.UnauthorizedSessionRequestException: SESN0008E: a user authenticated as anonymous has attempted to access a session owned by:WASLTPARealm/uid=xxxxx,cn=xxxx,cn=xxxx,ou=xxxxx,ou=xxxx,o=xxxx,c=xx.
01-08 10:36:14.915: D/WL_DIRECT_UPDATE_MANAGER(17035): DirectUpdateManager.startUpdate.onDirectUpdateSuccess: {"status":"FAILURE_UNKNOWN","operation":"finish"}
01-08 10:36:14.925: D/WL_DIRECT_UPDATE_CHALLENGE_HANDLER(17035): defaultListener.onFinish: status=FAILURE_UNKNOWN
01-08 10:36:14.935: D/WL_DIRECT_UPDATE_CHALLENGE_HANDLER(17035): defaultListener.onFinish: hideProgressDialog
01-08 10:36:14.935: D/Dialog(17035):  checkMirrorLinkEnabled returns : false
01-08 10:36:14.935: D/Dialog(17035): showing allowed

显然，排除DataPower之后，问题就消失了。 如何修复它

我解决了在server.xml文件中将httpSession属性invalidateOnUnauthorizedSessionRequestException设置为true的问题。

---

关于。

来自评论部分：

我写完问题后很快就解决了。我用答案编辑了我的问题。我解决了在server.xml文件中将httpSession属性invalidateOnUnauthorizedSessionRequestException设置为true的问题

---

我们不想在Liberty上的server.xml中使用我不了解的属性。这个问题已经解决了还是还没有解决？对不起。我写完问题后很快就解决了。我用答案编辑了我的问题。我解决了在server.xml文件中将httpSession属性invalidateOnUnauthorizedSessionRequestException设置为true的问题。请在下面的“您的答案”字段中编写解决方案作为问题的答案。不要用解决方案编辑问题。。。