C# MVC how statements work

Question

I have the code below, and to call the Session that stores the user data, only once I want to put it in the controller statement.

Doubt

The variable usuarioLogado is by request or it may happen that user X calls the controller and in between user Y calls the same controller, and usuarioLogado information exchange, where should be reading user X, step to have user Y.

Code

public class AppRequisitoController : Controller
{
    string controller = "AppRequisito";
    UsuarioLogadoDTO usuarioLogado = Services.UsuarioService.SessaoUsuarioLogado();

    private void Listagem(Conexao db)
    {   
        var repAppRequisito = new AppRequisitoRepositorio(db);
        ViewBag.ListaAppRequisito = repAppRequisito.ComboBox(usuarioLogado);
    }

User Session

public static UsuarioLogadoDTO SessaoUsuarioLogado()
{
    return HttpContext.Current.Session[Constantes.sessaoUsuarioLogado] as UsuarioLogadoDTO;
}

Answer 1

Interactions in web applications can be Stateless or Statefull, that is, it does not maintain application status or keeps track of the state of interactions. In requests Stateless states are maintained on the customer, through cookies or otherwise, always in an encrypted form.

A Session on the other hand keeps the state on the server different from the cookie, so Statefull, it works as follows, your application creates a key that references the data that is temporarily kept on the server. Then it sends a cookie or other form of authentication to the client, which references the data stored on the server.

Then there would be no case of the user receiving data from another user’s session because it is referenced by this unique key.

Answer 2

It’s always by request. This doesn’t just apply to ASP.NET MVC, this is how a web application works.

Basically, no server-side state is maintained. That’s why you use strategies like cookies to simulate this kind of thing, the cookies are sent in all requests and handled on the server.