search

jetty / jetty.project

Eclipse Jetty® - Web Container & Clients - supports HTTP/2, HTTP/1.1, HTTP/1.0, websocket, servlets, and more
https://eclipse.dev/jetty
Other
3.82k stars 1.91k forks source link

HttpSession lastAccessedTime and isNew not getting updated #12070

Closed Horcrux7 closed 1 month ago

Horcrux7 commented 1 month ago

Jetty version(s) 12.0.11

Jetty Environment ee8

Java version/vendor (use: java -version) openjdk version "21" 2023-09-19 OpenJDK Runtime Environment (build 21+35-2513) OpenJDK 64-Bit Server VM (build 21+35-2513, mixed mode, sharing)

OS type/version Windows 10 and Windows 11

Description In our environment the value of the HttpSession.getLastAccessedTime() is always identical to HttpSession.getCreationTime(). Also the value of HttpSession.isNew() returns always true.

The getId() and the hashCode() does not change between different HTTP request. This means the session cookie was send and received correctly. It was not a new session.

The requests are HTTP1/1 POST requests.

Attached is JettyServer Dump: jettydump.txt

janbartel commented 1 month ago

Looking into this.

janbartel commented 1 month ago

Fixed via #12078