Token based remember me does not work, if context root is / ----------------------------------------------------------- Key: JBSEAM-4605 URL: https://jira.jboss.org/jira/browse/JBSEAM-4605 Project: Seam Issue Type: Bug Components: Security Affects Versions: 2.2.0.GA Reporter: Dieter Rehbein If you have an .ear file containing a web-application with context-root "/", token based remember me does not work. The reason: the method getCookiePath() of org.jboss.seam.security.RememberMe returns an empty string, if context-root is "/". To fix this, the following change in class RememberMe is required: change public String getCookiePath() { FacesContext ctx = FacesContext.getCurrentInstance(); return ctx != null ? ctx.getExternalContext().getRequestContextPath() : null; } to public String getCookiePath() { FacesContext ctx = FacesContext.getCurrentInstance(); String cookiePath = ctx != null ? ctx.getExternalContext().getRequestContextPath() : null; if ("".equals(cookiePath)) { cookiePath = "/"; } return cookiePath; } -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira