[GEODE-7438] Session cookie set does not reflect the context's SessionCookieConfig

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Resolved
• Fix Version/s: 1.12.0
• Component/s: http session
• Labels: docs
• Assignee: Unassigned
• Reporter: Charles Smith
• Created: 11/Nov/19 22:47
• Updated: 30/Mar/20 23:38
• Resolved: 02/Dec/19 16:12

Description

The session cookie set and used by the HTTP Session module for AppServers should honor the httponly and secure settings of the ServetContext's SessionCookieConfig.

Currently the cookie created in the SessionCachingFilter.addSessionCookie method does not use any settings from the SessionCookieConfig but it could easily do so.

Issue Links

• links to: GitHub Pull Request #4311