search

baiheqiang / memcached-session-manager

Automatically exported from code.google.com/p/memcached-session-manager
0 stars 0 forks source link

Make SessionTrackerValve.setNewSessionCookie more robust (handle different possible cases) #66

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
Feedback by Peter Rossbach points out 3 potential issues with 
SessionTrackerValve.setNewSessionCookie:

- Session cookie can have a different name than JSESSIONID (already tracked as 
#65)
- EmptySessionPath handling
- Consider the domain of the cookie

org.apache.catalina.ha.session.JvmRouteBinderValve.setNewSessionCookie is a 
good place to see a working implementation.

Original issue reported on code.google.com by martin.grotzke on 13 Dec 2010 at 1:13

GoogleCodeExporter commented 8 years ago 
Setting the session cookie / changing the session id is now delegated to 
o.a.catalina.connector.Request.changeSessionId(String sessionId). This is 
available since 6.0.21!

Original comment by martin.grotzke on 28 Dec 2010 at 10:35

GoogleCodeExporter commented 8 years ago

Original comment by martin.grotzke on 27 Jan 2011 at 10:36