Console: Cookie config #486

New Issue

idk · 2025-04-21T15:11:32-04:00

idk commented

2025-04-21 15:11:32 -04:00

Would like to customize the cookie name per-router (rather than the default JSESSIONID) so two routers on the same machine don't contaminate each other resulting in POST form errors (browsers treat different ports on the same box as the same w.r.t. cookies). Would also like to set http only as firefox is throwing a warning with Jetty 9.3.

This is also the cause of the cookie issues when running both http and https console, see trac #2160 http://trac.i2p2.i2p/ticket/2160

But cookie config completely changes in Jetty from 9.3 to 9.4; moving from SessionManager.getSessionCookieConfig() to the SessionHandler. SessionManager is gone in 9.4. So would have to add it to the debian patch 0002 for 9.4, or use reflection, and test both. Changes would be in LocaleWebAppHandler where the SessionHandler is instantiated.

Would like to customize the cookie name per-router (rather than the default JSESSIONID) so two routers on the same machine don't contaminate each other resulting in POST form errors (browsers treat different ports on the same box as the same w.r.t. cookies). Would also like to set http only as firefox is throwing a warning with Jetty 9.3. This is also the cause of the cookie issues when running both http and https console, see trac #2160 http://trac.i2p2.i2p/ticket/2160 But cookie config completely changes in Jetty from 9.3 to 9.4; moving from SessionManager.getSessionCookieConfig() to the SessionHandler. SessionManager is gone in 9.4. So would have to add it to the debian patch 0002 for 9.4, or use reflection, and test both. Changes would be in LocaleWebAppHandler where the SessionHandler is instantiated.

zzz was assigned by idk

2025-04-21 15:11:32 -04:00

idk commented

2025-04-21 15:11:32 -04:00

ref:

https://stackoverflow.com/questions/24017645/set-jetty-session-cookie-name-programmatically

http://www.eclipse.org/jetty/documentation/jetty-9/index.html#session-management

ref: https://stackoverflow.com/questions/24017645/set-jetty-session-cookie-name-programmatically http://www.eclipse.org/jetty/documentation/jetty-9/index.html#session-management

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: I2P_Developers/i2p.i2p#486