[NIFI-8124] Allow Cookie Preservation in Redirects for InvokeHTTP

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.15.3
• Fix Version/s: 1.17.0, 1.16.1
• Component/s: Extensions
• Labels: InvokeHTTP cookie cookies http
• Assignee: Marcus Ely
• Reporter: Shawn Weeks
• Created: 07/Jan/21 18:10
• Updated: 28/Mar/22 02:40
• Resolved: 23/Mar/22 20:59

Description

Some authentication systems like 2-way ssl on an F5 Appliance use session cookies during redirection to determine who you are. Currently InvokeHTTP does not preserve these cookies during redirection causing authentication failure. The OkHttp Library supports a Cookie Jar option like curl's "-c" that would allow this to work. This issue is to add the option to enable that feature if needed but leave it disabled by default.

Of note it appears the Apache HttpClient supports this by default exactly opposite from OkHttp.

Issue Links

• links to: GitHub Pull Request #5887