Session Token in Custom Object

[SergeiBakhaev]

Hello!

To use WS API in my custom objects, I need session token.

Since 6.1 it was possible to get it like this:

var sessionToken = parent.parent.ArcherApp.globals.workpointFeatures.SessionToken;‍‍

But, I've recently updated to 6.4 SP1 P1, and ArcherApp.globals.workpointFeatures is now a JSON string encoded into base64.

That requires me to do decoding, and then double deserialization to parse JSON:

var sessionToken = Sys.Serialization.JavaScriptSerializer.deserialize(Sys.Serialization.JavaScriptSerializer.deserialize(atob(parent.parent.ArcherApp.globals.workpointFeatures))).SessionToken;‍

Is there any easier way to get session token?

[DavidPetty · Accepted solution]

Nope

This is what I use, and it about the same thing your're doing:

var sessionToken = JSON.parse(JSON.parse(atob(parent.parent.ArcherApp.globals.workpointFeatures))).SessionToken‍‍‍

[Ilya_Khen]

What about Headers? Like 

x-csrf-token

[DavidPetty]

Definitely not the user session token

It's the Cross-Site Request Forgery token.

The session token is also in a read-only cookie; client side scripts can't read it.

[Ilya_Khen]

Ah, okay, but I meant, is not it so that all session elements are stored also in Headers?

[DavidPetty]

Not really.  Either in application variables, ASP.NET viewstate or cookies.

[Ilya_Khen]

Great, thanks!

[STEPHENCHAN]

Hi David,  The following doesn't seem to work anymore.  Is there an alternative way to obtain the session token?

var sessionToken = JSON.parse(JSON.parse(atob(parent.parent.ArcherApp.globals.workpointFeatures))).SessionToken‍‍‍

[DavidPetty]

@STEPHENCHAN seems to be working fine for me on 6.12 P5

[STEPHENCHAN]

Thanks. I got it to work eventually.   It was returning undefined initially.