[KNOX-911] Ability to scope cookies to a given Path

• Type: Wish
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.13.0
• Assignee: Attila Kanto
• Reporter: Attila Kanto
• Created: 22/Mar/17 12:25
• Updated: 28/Mar/19 14:09
• Resolved: 25/Apr/17 22:55

Description

If there are multiple individual Knox instances behind of a reverse proxy, then it would be very useful if the Cookies could be scoped to a given Path.

If a reverse proxy is put at the font of multiple Knox instances then scoping the Cookies to domain is not sufficient since the /gateway1/... and /gateway2/... cookies will overwrite each other.

                          +---------------------------------+
                          |                                 |
                          |        Reverse Proxy            |
                          |                                 |
                          +---------------------------------+
                                  |            |
               /gateway1/topology |            | /gateway2/topology
                                  |            |
     +----------------------------v----+    +--v------------------------------+
     |                                 |    |                                 |
     |  Knox 1 (/gateway1/topology)    |    |  Knox 2 (/gateway2/topology)    |
     |                                 |    |                                 |
     +---------------------------------+    +---------------------------------+

Proposal:
Cookies can be scoped with Set-Cookie: Path=/somepath header field.

It would be very convenient if this scope path could be set in gateway-site.xml and Knox would return it in Set-Cookie header field to clients.

Issue Links

• is related to: KNOX-930 ScopingCookies Feature Logging too Much