zowe / zlux

The top-level superproject for zLUX. zLUX includes the Zowe Desktop framework in addition to several built-in apps and an example server implementation.
Eclipse Public License 2.0
38 stars 42 forks source link

Support for API ML cookie using cookie identifier #971

Open pablocarle opened 1 year ago

pablocarle commented 1 year ago

Describe the bug

This was already discussed in the squad meeting, but opening here to have a place to follow-up on it. API ML introduced support for an instance-based cookie identifier for the authentication cookie apimlAuthenticationToken, described here: https://docs.zowe.org/stable/user-guide/api-mediation/api-gateway-configuration/#unique-cookie-name-for-multiple-zowe-instances

It works somewhat differently than the zss session implementation of similar feature, in that it has its own parameter in zowe.yaml: components.gateway.apiml.security.auth.uniqueCookie

This is scheduled for 2.9, as the version released in 2.8 has a known bug, where if set API ML will not work properly.