title: Spring HTTP Invoker session (state) storage
body: <p>i have a Swing-client and a Server running on tomcat 7, which communicate with each other using Spring (3.1) HTTP invoker. The communication works fine so far (even with TSL), but now i am trying to add Spring Security.</p>
  
  <p>side-note: In a typical webapplication i would use basic authentication to authenticate the user. After my CustomAuthenticationProvider returns an Authentication object for the user, everything "just works", meaning that on every further request the SecurityContext is automatically set. I guess the login returns a session-key to the client which is send on every request to identify the session.</p>
  
  <p>That is pretty much what i am looking for with HTTP-Invoker. At the moment it seems like i get a new context on every request, which is bad, because my customAuthenticationManager.authenticate(Authentication auth) method is pretty costy and should really only be called once per user-session.</p>
  
  <p>Any Idea?</p>
  
  <p><em>edit</em> i found some hints on this at <a href="http://forum.springsource.org/showthread.php?10764-Maintaing-State-while-using-HttpInvoker" rel="nofollow">http://forum.springsource.org/showthread.php?10764-Maintaing-State-while-using-HttpInvoker</a> ,but as this link is more then 8 years old, i was hoping for an easier solution.</p>