If Cookie value is JSON string, then it is not getting parsed correctly

[rishikesh_darandale]

When the cookie with JSON object is sent to wildfly 8.1 container, then it is not getting parsed correctly. If that JSON string has '=', then undertow is throwing IllegalArgument Exception.

Here is sample cookie with value:

sample={"v2":-2,"v1":1,"rid":"d046012-55070443-84d7-15d6-473f3","ru":"http://myapplication.com/test","r":"mydomain.com","st":"", "c":"http://mydomain.com/search=testme","pv":1,"lc":{"d2":{"v":1,"s":false}},"cd":2,"cp":{"usrSessionID":"some_unique_value","MPS":seen"}}

Exception:

Caused by: java.lang.IllegalArgumentException: Cookie name ":-2,"v1":1,"rid":"d046012-55070443-84d7-15d6-473f3","ru":"http://myapplication.com/test","r":"mydomain.com","st":"", "c":"http://mydomain.com/search" is a reserved token

I have put a solution[1] in undertow core, can somebody review and let me know the feedback.

Thanks

Rishi

[1] [undertow-core] Added a support to read the cookie value as JSON object · ff3fd13 · RishikeshDarandale/undertow · GitHu…

[ctomc]

Hi,

Solution you did is wrong, as such capability already exists and it is just matter of configuration.

see wildfly/wildfly-undertow_2_0.xsd at master · wildfly/wildfly · GitHub for shema reference.

in short just add allow-equals-in-cookie-value="true" to http-listener configuration or any other for that you need it for.

[rishikesh_darandale]

Sorry, I had already tried setting that parameter under undertow subsystem, still the code is throwing the same exception. The parsing code is not capable of parsing the cookie value as json string, hence I have added that code.

Note: = is in json string object.

[rishikesh_darandale]

This has been fixed under: https://github.com/undertow-io/undertow/commit/fd612a3d3ddc4303ee3687c0c1ac3c5e3bd1a47e

If JSON object has '=' inside the object, then we need to add allow-equals-in-cookie-value="true".