FormAuthentication assumes "localhost" when adding cookies

• Key: CACTUS-37
• Type: Bug
• Status: Closed
• Resolution: Fixed
• Priority: Major
• Assignee: Vincent Massol
• Reporter: Jason Arndt
• Component/s: Framework
• Fix Version/s: 1.6

Environment

Operating System: All
Platform: All

Description

When the FormAuthentication's authenticate method adds the session id cookie
to the session, it uses the BaseWebRequest addCookie(theName, theValue)
method, which calls the addCookie(theDomain, theName, theValue) method, but
uses "localhost" as theDomain. This makes all tests required to run with the
cactus.contextURL property as "http://localhost" in order to work. However,
that is not always the case, so the cookie fails to be added to the session.

The call to addCookie that FormAuthentication makes needs to use the addCookie
(theDomain, theName, theValue) method and supply the Domain obtained from the
cactus.contextURL property.

Comments

This is a limitation of the FormAuthentication class that will be addressed
after Cactus 1.5.

[Vincent Massol]

Reopening after 1.5-beta1 release

[Vincent Massol]

Fixed by Kazuhito Suguri. Applied his patch today in CVS HEAD. Please reopen
if you still have a problem. Thanks.