[MEECROWAVE-114] make the tomcat session defaults configurable via meecrowave.properties and CLI

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.2.1
• Fix Version/s: 1.2.2
• Assignee: Romain Manni-Bucau
• Reporter: Mark Struberg
• Created: 27/Apr/18 09:09
• Updated: 17/Jul/18 22:00
• Resolved: 27/Apr/18 09:33

Description

Currently there seems to be no way to tweak the defaults for the tomcat session. Like the default session timeout, and secure. One has to configure this in web.xml or web-fragment.xml:

    <session-config>
        <session-timeout>20</session-timeout>
        <cookie-config>
            <secure>true</secure>
        </cookie-config>
    </session-config>

But this makes it impossible to tweak those values in production.