search

magro / testrepo

foo
0 stars 0 forks source link

Cookie set on memcached failure doesn't honor request's secure property #47

Closed magro closed 9 years ago

magro commented 9 years ago

From martin.grotzke on March 16, 2010 23:05:14

When the memcached node fails a session is associated with and the session therefore gets relocated to another memcached node, the memcached-session-manager sets a new JSESSIONID cookie (with the session id containing the new memcached node id).

This cookie does not have the "Secure" property set if the request was done over a secure connection (https).

Original issue: http://code.google.com/p/memcached-session-manager/issues/detail?id=47

magro commented 9 years ago

From martin.grotzke on March 16, 2010 15:08:38

Fixed, will be released with 1.2

Status: Fixed
Labels: Milestone-1.2