Session cookie path in AS 7

[Scott Guilbeaux]

I'm looking into moving our application to AS 7 and encountered a problem while testing with Firefox 5.  AS 7 sets the session cookie path wrapped in quotes, the previous versions of the AS did not do this.  Firefox 5 treats the quotes as part of the path itself so it never sends session cookie info in requests which causes a new session to created on each request.  I tested this with IE 9 and it seems to have the same problem that Firefox does. However, Chrome works just fine.

Can this behavior be changed without hacking up the code?  If not, is this behavior going to remain?

[anonym365451]

try to reinstall Firefox 5.

Have a look at my thread (similar problem with Richfaces on Weblogic Server):

http://community.jboss.org/thread/168753?tstart=0

[Remy Maucherat]

Set system property org.apache.tomcat.util.http.ServerCookie.FWD_SLASH_IS_SEPARATOR to false. Or use the most accomodating behaviors: system property org.apache.catalina.STRICT_SERVLET_COMPLIANCE to false.

[Scott Guilbeaux]

Thank you for the replies. Setting org.apache.tomcat.util.http.ServerCookie.FWD_SLASH_IS_SEPARATOR to false indeed fixes the problem I was having with certain browsers.

[Benjamin Browning]

Is there a reason one of these properties aren't set by default? The current behavior breaks cookie-based sessions in Firefox 5, IE 9, curl, and maybe others.

[Matt Steedle]

Where do you set org.apache.tomcat.util.http.ServerCookie.FWD_SLASH_IS_SEPARATOR to false.  Is there a file I do this or is it an environment variable?

[Jaikiran Pai]

Matt Steedle wrote:

Where do you set org.apache.tomcat.util.http.ServerCookie.FWD_SLASH_IS_SEPARATOR to false.  Is there a file I do this or is it an environment variable?

https://docs.jboss.org/author/display/AS7/Admin+Guide#AdminGuide-SystemProperties

[Matt Steedle]

where in standalone.xml do I put this? Like can you show me an example of how I would do this.

Thanks

[Jim Crossley]

Hi Matt.  Put it right after the <extensions> element, like this (line 35):  https://gist.github.com/1085307

[cchx]

Well, you could say that regarding the spec is the recommended way to write code. On the other hand, it took me about two days to find the cause for this problem.

It would have been nice, if this issue would have been marked very, very large on the migration guide: https://docs.jboss.org/author/display/AS7/How+do+I+migrate+my+application+from+AS5+or+AS6+to+AS7

I'm pretty astound, that only so few people ran into this problem...

[Jaikiran Pai]

https://issues.jboss.org/browse/AS7-1283

[Xiwen Luo]

we have set Set system property org.apache.tomcat.util.http.ServerCookie.FWD_SLASH_IS_SEPARATOR to false and it works.

However when we put jboss7 behind the amazon ec2 load balancer, the problem comes again

is there anyone know this ?

[Phanor Coll]

i added

[code]

<system-properties>

        <property name="org.apache.tomcat.util.http.ServerCookie.FWD_SLASH_IS_SEPARATOR" value="false"/>

</system-properties>

[/code]

after </extensions> but it still doesnt work..