[ 
https://issues.apache.org/jira/browse/NIFI-8124?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Shawn Weeks updated NIFI-8124:
------------------------------
    Description: 
Some authentication systems like 2-way ssl on an F5 Appliance use session 
cookies during redirection to determine who you are. Currently InvokeHTTP does 
not preserve these cookies during redirection causing authentication failure. 
The OkHttp Library supports a Cookie Jar option like curl's "-c" that would 
allow this to work. This issue is to add the option to enable that feature if 
needed but leave it disabled by default.

Of note it appears the Apache HttpClient supports this by default exactly 
opposite from OkHttp.

  was:
Some authentication systems like 2-way ssl on an F5 Appliance use session 
cookies during redirection to determine who you are. Currently InvokeHTTP does 
not preserve this cookies during redirection causing authentication failure. 
The OkHttp Library supports a Cookie Jar option like curl's that would allow 
this to work. This issue is to add the option to enable that feature if needed 
but leave it disabled by default.

Of note it appears the Apache HttpClient supports this by default exactly 
opposite from OkHttp.


> Allow Cookie Preservation in Redirects for InvokeHTTP
> -----------------------------------------------------
>
>                 Key: NIFI-8124
>                 URL: https://issues.apache.org/jira/browse/NIFI-8124
>             Project: Apache NiFi
>          Issue Type: Improvement
>            Reporter: Shawn Weeks
>            Priority: Minor
>
> Some authentication systems like 2-way ssl on an F5 Appliance use session 
> cookies during redirection to determine who you are. Currently InvokeHTTP 
> does not preserve these cookies during redirection causing authentication 
> failure. The OkHttp Library supports a Cookie Jar option like curl's "-c" 
> that would allow this to work. This issue is to add the option to enable that 
> feature if needed but leave it disabled by default.
> Of note it appears the Apache HttpClient supports this by default exactly 
> opposite from OkHttp.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to