Sandeep More created KNOX-2479:
----------------------------------

             Summary: set-cookie headers broken when spaces between attributes 
are missing
                 Key: KNOX-2479
                 URL: https://issues.apache.org/jira/browse/KNOX-2479
             Project: Apache Knox
          Issue Type: Bug
          Components: Server
            Reporter: Sandeep More
            Assignee: Sandeep More
             Fix For: 1.6.0


The assumption here is that SET-COOKIE header returned to Knox will always have 
spaces between the fields 

e.g.
{code:java}
SESSION=e69d3d08-7452-45cb-90bb-9cdde3fa1342; Path=/; HttpOnly{code}
Which is not the case when CM returns the SET-COOKIE header
{code:java}
SESSION=e69d3d08-7452-45cb-90bb-9cdde3fa1342;Path=/;HttpOnly
{code}
Which breaks the Knox logic. 

Examples in RFC [https://tools.ietf.org/html/rfc6265#section-2.2] have 
whitespace but they do not specify format. Since CM uses it and it was working 
up until now Knox should be fixed to support it.  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to