Your achievements

Level 1

0% to

Level 2

Tip /
Sign in

Sign in to Community

to gain points, level up, and earn exciting badges like the new
Bedrock Mission!

Learn more

View all

Sign in to view all badges

Adobe Summit 2023 [19th to 23rd March, Las Vegas and Virtual] | Complete AEM Session & Lab list

obtaining session-secret without token param


Level 3
I have noticed that if I take out token param gak=lalala from

it still returns session-secret

but if I run full url with token in my other browser for
example opera I get "This meeting ... error "

does that mean 1st login must be initiated for that browser
prior to obtaining session-secret and also authtoken is not needed
to obtain session-secret?

1 Reply


it could be that you had a valid session cookie (for your
developer account) we were able to fullfill the request without
extra authentication parameter.

For sure we do make sure that you are authenticated (and the
account owner) for the session request, but I don't really care if
the authentication comes from a token or a cookie.

BTW, we don't rely entirely on cookies for authentication
because depending on browser and operating system they have erratic
behaviour in Flash (i.e. cookies are not shared between HTTP
requests and FileReference upload/download) so we use
authentication token (passed on every request ):) that is the only
way that works everywhere.