5:01 p.m.
Cross Domain JSESSIONID Cookie
------------------------------
Key: JBWEB-107
URL: http://jira.jboss.com/jira/browse/JBWEB-107
Project: JBoss Web
Issue Type: Feature Request
Security Level: Public (Everyone can see)
Components: Tomcat Module
Reporter: Mike Millson
Assigned To: Mladen Turk
Currently the JSESSIONID cookie domain is set to the domain name of the Host that emits
the cookie (e.g. www.domain.com). This is an issue with customers using Aliases (e.g.
secure.domain.com, zzz.domain.com, etc.), as the session is lost when switching between
the main domain and any aliases. In these cases, it would be useful to be able to specify
the domain to be "domain.com" so the same JSESSIONID cookie is used across the
aliases and converges to the same session.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:11 p.m.
New subject: [JBoss JIRA] Assigned: (JBWEB-107) Cross Domain JSESSIONID Cookie
[ http://jira.jboss.com/jira/browse/JBWEB-107?page=all ]
Mike Millson reassigned JBWEB-107:
----------------------------------
Assignee: Remy Maucherat (was: Mladen Turk)
Cross Domain JSESSIONID Cookie
------------------------------
Key: JBWEB-107
URL: http://jira.jboss.com/jira/browse/JBWEB-107
Project: JBoss Web
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Tomcat Module
Reporter: Mike Millson
Assigned To: Remy Maucherat
Currently the JSESSIONID cookie domain is set to the domain name of the Host that emits
the cookie (e.g. www.domain.com). This is an issue with customers using Aliases (e.g.
secure.domain.com, zzz.domain.com, etc.), as the session is lost when switching between
the main domain and any aliases. In these cases, it would be useful to be able to specify
the domain to be "domain.com" so the same JSESSIONID cookie is used across the
aliases and converges to the same session.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:40 p.m.
New subject: [JBoss JIRA] Commented: (JBWEB-107) Cross Domain JSESSIONID Cookie
[ http://jira.jboss.com/jira/browse/JBWEB-107?page=comments#action_12412751 ]
Remy Maucherat commented on JBWEB-107:
--------------------------------------
Support for cookie configuration will be provided, but I don't want to rush a hack for
it, sorry. Please provide a custom patch if the customer really needs this feature right
now.
Cross Domain JSESSIONID Cookie
------------------------------
Key: JBWEB-107
URL: http://jira.jboss.com/jira/browse/JBWEB-107
Project: JBoss Web
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Tomcat Module
Reporter: Mike Millson
Assigned To: Remy Maucherat
Currently the JSESSIONID cookie domain is set to the domain name of the Host that emits
the cookie (e.g. www.domain.com). This is an issue with customers using Aliases (e.g.
secure.domain.com, zzz.domain.com, etc.), as the session is lost when switching between
the main domain and any aliases. In these cases, it would be useful to be able to specify
the domain to be "domain.com" so the same JSESSIONID cookie is used across the
aliases and converges to the same session.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
10:21 p.m.
New subject: [JBoss JIRA] Updated: (JBWEB-107) Cross Domain JSESSIONID Cookie
[ http://jira.jboss.com/jira/browse/JBWEB-107?page=all ]
Mike Millson updated JBWEB-107:
-------------------------------
Attachment: SessionCookiePathValve.java
Cross Domain JSESSIONID Cookie
------------------------------
Key: JBWEB-107
URL: http://jira.jboss.com/jira/browse/JBWEB-107
Project: JBoss Web
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Tomcat Module
Reporter: Mike Millson
Assigned To: Remy Maucherat
Attachments: SessionCookiePathValve.java
Currently the JSESSIONID cookie domain is set to the domain name of the Host that emits
the cookie (e.g. www.domain.com). This is an issue with customers using Aliases (e.g.
secure.domain.com, zzz.domain.com, etc.), as the session is lost when switching between
the main domain and any aliases. In these cases, it would be useful to be able to specify
the domain to be "domain.com" so the same JSESSIONID cookie is used across the
aliases and converges to the same session.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:58 p.m.
New subject: [JBoss JIRA] Commented: (JBWEB-107) Cross Domain JSESSIONID Cookie
[ http://jira.jboss.com/jira/browse/JBWEB-107?page=comments#action_12413616 ]
Remy Maucherat commented on JBWEB-107:
--------------------------------------
You can wrap. I am not implementing this right now, since the next servlet spec will add
session cookie configuration, and I don't want to add some duplicate conflicting
configuration as part of a quick hack.
Cross Domain JSESSIONID Cookie
------------------------------
Key: JBWEB-107
URL: http://jira.jboss.com/jira/browse/JBWEB-107
Project: JBoss Web
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Tomcat Module
Reporter: Mike Millson
Assigned To: Remy Maucherat
Attachments: SessionCookiePathValve.java
Currently the JSESSIONID cookie domain is set to the domain name of the Host that emits
the cookie (e.g. www.domain.com). This is an issue with customers using Aliases (e.g.
secure.domain.com, zzz.domain.com, etc.), as the session is lost when switching between
the main domain and any aliases. In these cases, it would be useful to be able to specify
the domain to be "domain.com" so the same JSESSIONID cookie is used across the
aliases and converges to the same session.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:56 p.m.
New subject: [JBoss JIRA] Updated: (JBWEB-107) Session cookie configuration
[
https://jira.jboss.org/jira/browse/JBWEB-107?page=com.atlassian.jira.plug...
]
Remy Maucherat updated JBWEB-107:
---------------------------------
Summary: Session cookie configuration (was: Cross Domain JSESSIONID Cookie)
Merging into a generic issue for configuring session cookie, which is a portion of the new
features in Servlet 3.0.
Session cookie configuration
----------------------------
Key: JBWEB-107
URL: https://jira.jboss.org/jira/browse/JBWEB-107
Project: JBoss Web
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Tomcat Module
Reporter: Mike Millson
Assignee: Remy Maucherat
Attachments: SessionCookiePathValve.java
Currently the JSESSIONID cookie domain is set to the domain name of the Host that emits
the cookie (e.g. www.domain.com). This is an issue with customers using Aliases (e.g.
secure.domain.com, zzz.domain.com, etc.), as the session is lost when switching between
the main domain and any aliases. In these cases, it would be useful to be able to specify
the domain to be "domain.com" so the same JSESSIONID cookie is used across the
aliases and converges to the same session.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
10:46 p.m.
New subject: [JBoss JIRA] Updated: (JBWEB-107) Session cookie configuration
[
https://jira.jboss.org/jira/browse/JBWEB-107?page=com.atlassian.jira.plug...
]
Mike Millson updated JBWEB-107:
-------------------------------
Attachment: customvalve.zip
A better workaround implementation. Credit: Takayoshi Kimura.
Session cookie configuration
----------------------------
Key: JBWEB-107
URL: https://jira.jboss.org/jira/browse/JBWEB-107
Project: JBoss Web
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Tomcat Module
Reporter: Mike Millson
Assignee: Remy Maucherat
Attachments: customvalve.zip, SessionCookiePathValve.java
Currently the JSESSIONID cookie domain is set to the domain name of the Host that emits
the cookie (e.g. www.domain.com). This is an issue with customers using Aliases (e.g.
secure.domain.com, zzz.domain.com, etc.), as the session is lost when switching between
the main domain and any aliases. In these cases, it would be useful to be able to specify
the domain to be "domain.com" so the same JSESSIONID cookie is used across the
aliases and converges to the same session.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
3:13 p.m.
New subject: [JBoss JIRA] Resolved: (JBWEB-107) Session cookie configuration
[
https://jira.jboss.org/jira/browse/JBWEB-107?page=com.atlassian.jira.plug...
]
Remy Maucherat resolved JBWEB-107.
----------------------------------
Resolution: Done
I have added Servlet 3.0 style session cookie configuration. This will be in JBoss Web
2.1.1.CR6.
Session cookie configuration
----------------------------
Key: JBWEB-107
URL: https://jira.jboss.org/jira/browse/JBWEB-107
Project: JBoss Web
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Core
Reporter: Mike Millson
Assignee: Remy Maucherat
Fix For: JBossWeb-2.1.1.GA
Attachments: customvalve.zip, SessionCookiePathValve.java
Currently the JSESSIONID cookie domain is set to the domain name of the Host that emits
the cookie (e.g. www.domain.com). This is an issue with customers using Aliases (e.g.
secure.domain.com, zzz.domain.com, etc.), as the session is lost when switching between
the main domain and any aliases. In these cases, it would be useful to be able to specify
the domain to be "domain.com" so the same JSESSIONID cookie is used across the
aliases and converges to the same session.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
9:16 a.m.
New subject: [JBoss JIRA] Updated: (JBWEB-107) Session cookie configuration
[
https://jira.jboss.org/jira/browse/JBWEB-107?page=com.atlassian.jira.plug...
]
Takayoshi Kimura updated JBWEB-107:
-----------------------------------
Attachment: customvalve2.zip
Added latest workaround impl, customvalve2.zip. Use this one and ignore old files.
Session cookie configuration
----------------------------
Key: JBWEB-107
URL: https://jira.jboss.org/jira/browse/JBWEB-107
Project: JBoss Web
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Core
Reporter: Mike Millson
Assignee: Remy Maucherat
Fix For: JBossWeb-2.1.1.GA
Attachments: customvalve.zip, customvalve2.zip, SessionCookiePathValve.java
Currently the JSESSIONID cookie domain is set to the domain name of the Host that emits
the cookie (e.g. www.domain.com). This is an issue with customers using Aliases (e.g.
secure.domain.com, zzz.domain.com, etc.), as the session is lost when switching between
the main domain and any aliases. In these cases, it would be useful to be able to specify
the domain to be "domain.com" so the same JSESSIONID cookie is used across the
aliases and converges to the same session.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
4:43 p.m.
New subject: [JBoss JIRA] Updated: (JBWEB-107) Session cookie configuration
[
https://issues.jboss.org/browse/JBWEB-107?page=com.atlassian.jira.plugin....
]
Mike Millson updated JBWEB-107:
-------------------------------
Attachment: customvalve3.zip
Latest iteration that works for failover in a clustered environment.
Session cookie configuration
----------------------------
Key: JBWEB-107
URL: https://issues.jboss.org/browse/JBWEB-107
Project: JBoss Web
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: Core
Reporter: Mike Millson
Assignee: Remy Maucherat
Fix For: JBossWeb-2.1.1.GA
Attachments: customvalve.zip, customvalve2.zip, customvalve3.zip,
SessionCookiePathValve.java
Currently the JSESSIONID cookie domain is set to the domain name of the Host that emits
the cookie (e.g. www.domain.com). This is an issue with customers using Aliases (e.g.
secure.domain.com, zzz.domain.com, etc.), as the session is lost when switching between
the main domain and any aliases. In these cases, it would be useful to be able to specify
the domain to be "domain.com" so the same JSESSIONID cookie is used across the
aliases and converges to the same session.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
4831
days inactive
5893
days old
9 comments
3 participants
participants (3)
-
Mike Millson (JIRA) -
Remy Maucherat (JIRA)
-
Takayoshi Kimura (JIRA)