[
https://issues.apache.org/jira/browse/AXIS2C-1566?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Robert Lazarski resolved AXIS2C-1566.
-------------------------------------
Fix Version/s: 2.0.0
Resolution: Fixed
The HTTP client was incorrectly removing cookies when the server response
did not include a Set-Cookie header. Per RFC 6265, cookies should persist
until they expire or the server explicitly deletes them with Max-Age=0.
The absence of Set-Cookie does NOT mean cookies should be deleted. This
caused session cookies to be lost after the first successful request.
> Client sends cookie only just after server sends Set-Cookie header
> ------------------------------------------------------------------
>
> Key: AXIS2C-1566
> URL: https://issues.apache.org/jira/browse/AXIS2C-1566
> Project: Axis2-C
> Issue Type: Bug
> Components: transport/http
> Affects Versions: 1.7.0
> Reporter: Akira Suzuki
> Priority: Major
> Labels: patch
> Fix For: 2.0.0
>
> Attachments: patch
>
>
> Client sends cookie only just after server sends Set-Cookie header
> 1. client requests to server without cookies
> 2. server responses with set-cookie header
> 3. client requests with cookie //OK
> 4. server responses without set-cookie headers
> 5. client requests without cookies // I think client should send cookie.
> I removed below lines from http_sender.c and that makes client to send cookie
> but I don't know that is a proper fix.
> if(!set_cookie_header_present) /* We need to remove any cookie set
> previously for this endpoint */
> {
> axis2_http_transport_utils_store_cookie(env, msg_ctx, NULL);
> }
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
