Wt

To confirm my theory I found that there are two WebControllers (one in WServer and the other in WApplication). I included appropriate headers from src, I accessed those private redirectSecret_ members and set them to the same value. And now it works :) !

Simplest solution:

Just give possibility to set the secret (something like WServer::setRedirectSecret(...) and WApplication::setRedirectSecret(...)) and it will be up to the client code to maintain same secret across many processes.

Code I used:

#define private public
#include "d:\Download\wt-3.3.4\src\web\WebSession.h"
#include "d:\Download\wt-3.3.4\src\web\WebController.h"
#undef public

...

WServer server( args[ 0 ] );
server.setServerConfiguration( args.size(), args.data(), myConfigFile );
server.controller()->redirectSecret_ = "12345";

...

MyApplication::MyApplication( const WEnvironment & env )
    : WApplication( env )
{
    session()->controller()->redirectSecret_ = "12345";
}

It seems that even WServer::setRedirectSecret(...) would be sufficient.