Uploaded image for project: 'WildFly EJB HTTP Client'
  1. WildFly EJB HTTP Client
  2. WEJBHTTP-39

Validate path when setting session affinity

    XMLWordPrintable

Details

    • Enhancement
    • Resolution: Done
    • Major
    • 1.0.19.Final, 1.1.2.Final
    • None
    • None

    Description

      At HttpTargetContext, when the session id is set, we don't validate JSESSIONID path.
      If the cookie path is defined, it must be equal to the resquest path or a prefix of it: https://tools.ietf.org/html/rfc6265#section-5.1.4

      Attachments

        Issue Links

          is related to

          Bug - A problem that impairs or prevents the functions of the product. WEJBHTTP-30 Thousand of unauthorized requests in between balancer and backend if backend is running in a cluster

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Activity

            People

              rhn-support-mmiura Masafumi Miura
              flaviarnn Flavia Rainone
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: