Even after specifying `create-session="stateless"` spring is creating JSESSIONID cookies -
even after specifying create-session="stateless"
spring creating jsessionid cookies , writing browser cache. understanding ; if mention stateless spring doesn't add session. missing here or understanding wrong ?
the problem facing because of
i using both basic authentication (for rest services) , form based authentication in application. if user logged in firefox , , uses basic authentication invoke rest service using restclient logs out first user after rest service returned. intention keep first user session active . please find configuration below
<http auto-config="false" pattern="/rest/internal/**" entry-point-ref="headerbasedauthenticationentrypoint" create-session="stateless" disable-url-rewriting="true"> <custom-filter position="basic_auth_filter" ref="headerbasedauthenticationfilter" /> </http>
i following response header in restclient
status code: 200 ok content-language: null content-length: 1043 content-type: text/html;charset=utf-8 date: wed, 19 nov 2014 10:26:57 gmt set-cookie: jsessionid=77c3ac743413c9455cf6fb1ec35f021e; path=/myapplication/; httponly login=""; path=/; secure; httponly userid=4be114d57a3c4d428e3ec9b3cea33463; expires=sat, 28-jul-2046 12:13:37 gmt; path=/; secure; httponly lang=en; expires=sat, 28-jul-2046 12:13:37 gmt; path=/
Comments
Post a Comment