Good to know that JSESSIONID cookie is created by Jetty. Is there a way to add a HTTPONLY flag on this cookie? I tried to add the JSESSIONID cookie right after the request.getSession() method manually. Do you think it would be overwritten by jetty?
On Wed, Jun 6, 2018 at 10:47 PM, 'Katayoon (Cloud Platform Support)' via Google App Engine <[email protected]> wrote: > The App Engine only provides the content for your app using Jetty > <https://cloud.google.com/appengine/docs/standard/java/runtime-java8>. > Session gets created when you call request.getSession() for the first time > and consequently JSESSIONID cookie > <https://www.eclipse.org/jetty/documentation/9.3.x/session-management.html> > is created when the session is created. Hope this explanation works for > you? > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > Visit this group at https://groups.google.com/group/google-appengine. > To view this discussion on the web visit https://groups.google.com/d/ > msgid/google-appengine/8d2af3bc-a494-4eee-9e91- > f4d52c50c6bc%40googlegroups.com > <https://groups.google.com/d/msgid/google-appengine/8d2af3bc-a494-4eee-9e91-f4d52c50c6bc%40googlegroups.com?utm_medium=email&utm_source=footer> > . > > For more options, visit https://groups.google.com/d/optout. > -- Baojun Xu Tel: +41 79 791 78 99 SolidusLink AG Rütistrasse 16 8952 Schlieren -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/CAB65iqn7pfTfQgzm%2BAn8dT8%3D-CqLn8H%3DWqX4DHPArCXRGtdStw%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
