[ https://issues.jboss.org/browse/WFLY-3537?page=com.atlassian.jira.plugin.... ] Anubis TheGreat updated WFLY-3537: ---------------------------------- Workaround Description: As I wrote in my thread on stackoverflow there's a workaround for this issue. Cookie header must be constructed manually in the following way: protected void set(final String name, final String value, final long maximumAgeInSeconds, final HttpServletRequest request) { // ServletActionContext.getResponse().addCookie(newInstance(name, value, maximumAgeInSeconds, request)); ServletActionContext.getResponse().addHeader("Set-Cookie", cookieValue(name, value, maximumAge, request)); } protected static String cookieValue(final String name, final String value, final long maximumAgeInSeconds, final HttpServletRequest request) { final SimpleDateFormat cookieExpiresHeaderFormat = new SimpleDateFormat("EEE, dd-MMM-yyyy HH:mm:ss zzz"); cookieExpiresHeaderFormat.setTimeZone(new SimpleTimeZone(0, "GMT")); final Date d = new Date(); d.setTime(d.getTime() + maximumAgeInSeconds * 1000L); final String cookieLifeTime = cookieExpiresHeaderFormat.format(d); return name + "=" + value + "; Expires=" + cookieLifeTime + "; Max-Age=" + maximumAge + "; Path=" + request.getContextPath(); } was: As I wrote in my thread on stackoverflow there's a workaround for this. Cookie header must be constructed manually like this: protected void set(final String name, final String value, final long maximumAgeInSeconds, final HttpServletRequest request) { // ServletActionContext.getResponse().addCookie(newInstance(name, value, maximumAgeInSeconds, request)); ServletActionContext.getResponse().addHeader("Set-Cookie", cookieValue(name, value, maximumAge, request)); } protected static String cookieValue(final String name, final String value, final long maximumAgeInSeconds, final HttpServletRequest request) { final SimpleDateFormat cookieExpiresHeaderFormat = new SimpleDateFormat("EEE, dd-MMM-yyyy HH:mm:ss zzz"); cookieExpiresHeaderFormat.setTimeZone(new SimpleTimeZone(0, "GMT")); final Date d = new Date(); d.setTime(d.getTime() + maximumAgeInSeconds * 1000L); final String cookieLifeTime = cookieExpiresHeaderFormat.format(d); return name + "=" + value + "; Expires=" + cookieLifeTime + "; Max-Age=" + maximumAge + "; Path=" + request.getContextPath(); } -- This message was sent by Atlassian JIRA (v6.2.6#6264)