When i try to debug this problem, i am using the E-System application to retrieve back the username and password through the session, it works by return the exact username and password. This show that this two application is using two different session space, am i right?
You are right. Both application have two different sessions.
how to join this two
application session space into one?
Each session have it's own session id. You are thinking in a way that both sessions should have same session id. In my opinion this is not the right way to go.
lets rewind a little back. What you listed in this
thread is a solution which you think is the best. The issue is not yet clear to me. I feel your issue is only in getting authentication.
What you are trying here is a single client accessing two different applications. But you are trying this at the client end. Probably a server to server communication is your solution.
But you need to have a good understanding about the architecture. Your issue is an architecture issue if the two applications don't share a jvm (today and in future).
At the server side you can take parameters and attributes from session and create a URL connection to other server and pass the parameters and attrributes in url. This way you will be exposing the parameters in URL for the get request.
There is a way you can do a post by not exposing the parameters in URL. That is to open a dummy browser at clients end, submit the form to other server and close the boowser. In this approach your parameters will be hidden fields in the form.