Uploaded image for project: 'Apache Knox'
  1. Apache Knox
  2. KNOX-2538

JSESSIONID cookie missing when Zeppelin UI proxied via Knox

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 1.6.0
    • Server
    • None

    Description

      Sometimes Knox gateway sends back Set-Cookie header in not proper formatted way, mix attribute order

      properly formatted SET-COOKIE response (start with JSESSIONID)
      GET /zeppelin/api/security/ticket
      Set-Cookie: JSESSIONID=ba760126-414f-406d-baa1-99e14eb47656; SameSite=none; Secure; Path=/; HttpOnly
      
      not properly formatted SET-COOKIE response
      GET /zeppelin/api/security/ticket
      Set-Cookie: SameSite=none; Secure; Path=/; JSESSIONID=b2934cd3-820a-47da-a9b8-4b3af3284502; HttpOnly
      

      _Informally, the Set-Cookie response header contains the header name "Set-Cookie" followed by a ":" and a cookie. Each cookie begins with a name-value-pair, followed by zero or more attribute-value pairs. _

      Not properly formatted SET-COOKIE issue is not always present, sometimes it is working, sometimes is not. Please try a couple of times to reproduce this issue, If the JSESSIONID cookie presents, remove it manually and refresh the page to simulate session timeout case.

      Attachments

        Issue Links

          Activity

            People

              smore Sandeep More
              zholoda Zoltan Holoda
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 20m
                  20m