Details
-
Type:
Bug
-
Status:
Resolved
-
Priority:
Major
-
Resolution: Not A Bug
-
Affects Version/s: 8.1.3
-
Fix Version/s: None
-
Component/s: None
-
Labels:None
-
Environment:Ubuntu 12.06 64-bit
-
Number of attachments :
Description
When SPDY is enabled, session cookies do not get written - Jetty always uses URL rewriting instead (;jsessionid is appended to the URL).
If URL rewriting is disabled (by setting SessionManager.sessionIdPathParameterName to null or "none"), session management is completely broken, i.e. each request causes the creation of a brand new session, and user state cannot be recovered by the servlet.
Hi Ido,
I've tried to reproduce the issue, but setting cookies works just fine for me with spdy. You can try this yourself on https://www.webtide.com which will set a cookie for JSESSIONID:
Content-Type text/html;charset=UTF-8
Expires Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie JSESSIONID=oud4ejzzynstnbxg0zfk667i;Path=/;Secure
X-Firefox-Spdy 1
Also the code within jetty responsible for setting/reading cookies should not be affected by spdy. I say "should" as we know that the devil sits in the details sometimes and I might be wrong.
Could you please try it with https://www.webtide.com and tell us if it works fine for you and give us more details like:
Cheers,
Thomas