[KNOX-3033] Add option to set the correct path for sticky session cookies instead of appending the role name

• Type: Improvement
• Status: Patch Available
• Priority: Major
• Resolution: Unresolved
• Component/s: Server
• Assignee: Istvan Toth
• Reporter: Istvan Toth
• Created: 30/Apr/24 08:30
• Updated: 19/Jul/24 04:54

Description

I have tried to override the sticky session cookie name by using the following HA parameter:

<param>
            <name>WEBHBASE</name>
            <value>enableStickySession=true;noFallback=true;enableLoadBalancing=true;stickySessionCookieName=STICKYCOOKIE</value>
</param>

However, KNOX still appended the service name to the cookie name:

24/04/30 08:25:11 DEBUG http.wire: http-outgoing-0 << "Set-Cookie: STICKYCOOKIE-WEBHBASE=58d004bcaccfddfdc69739ea053505c69b2679d6fc1da6f7e46d3907be2d1e6c; Path=/gateway/cdp-proxy-api-stoty; Secure; HttpOnly[\r][\n]"

AFAICT the point of overriding the cookie name would be integrating with other components (like a cloud LB) that expect a specific cookie name.
Appending the service name after the specified cooke name defeats this.

Issue Links

• links to: GitHub Pull Request #912