Re: Session Cookie Logging

2024-02-01 Thread Christopher Schultz
Dan, On 2/1/24 11:54, Dan McLaughlin wrote: I was able to identify the problem - there was a session configuration with cookie configuration in the catalina-base/web.xml file. catalina-base/conf/web.xml? I did mention on 26 Jan that this wasn't a good idea and could be causing this kind of p

Re: Session Cookie Logging

2024-02-01 Thread Dan McLaughlin
Hey Mark, I was able to identify the problem - there was a session configuration with cookie configuration in the catalina-base/web.xml file. I just wanted to suggest that it would be great if logging could be enabled to show not only what the parameters were set to, but also where the values cam

Re: Session Cookie Logging

2024-02-01 Thread Mark Thomas
On 27/01/2024 14:38, Dan McLaughlin wrote: Hey Mark, If you see a bug report, then that will mean I was able to reproduce it. I see different behaviors in our local docker environment. Still, it's nowhere as complex as our production environment--where everything is clustered and behind load

Re: Session Cookie Logging

2024-01-27 Thread Dan McLaughlin
Hey Mark, If you see a bug report, then that will mean I was able to reproduce it. I see different behaviors in our local docker environment. Still, it's nowhere as complex as our production environment--where everything is clustered and behind load balancers, etc... It probably would be easier

Re: Session Cookie Logging

2024-01-26 Thread Mark Thomas
On 26/01/2024 22:22, Dan McLaughlin wrote: Hey Konstantin, Thanks for the reply. I synced the source last night. I haven't had a chance to step through with a debugger yet. But the only way I could get the Cookie Path set was to modify the context.xml and add sessionCookiePath to every applicat

Re: Session Cookie Logging

2024-01-26 Thread Dan McLaughlin
Hey Konstantin, Thanks for the reply. I synced the source last night. I haven't had a chance to step through with a debugger yet. But the only way I could get the Cookie Path set was to modify the context.xml and add sessionCookiePath to every application. I'm pretty sure this wasn't how things w

Re: Session Cookie Logging

2024-01-26 Thread Christopher Schultz
Dan, On 1/26/24 02:44, Dan McLaughlin wrote: Well, so much for that theory. __Secure-JSESSIONID still sets the sessionCookiePath to /. I even removed the entire session-config from the web.xml and turned on copyXML to extract the secure#Foo.xml out to the conf/Catalina/localhost folder. Based

Re: Session Cookie Logging

2024-01-26 Thread Konstantin Kolinko
пт, 26 янв. 2024 г. в 04:01, Dan McLaughlin : > > Does anyone know what class we would crank the log level up to see why > Tomcat would ignore cookie-config in our web.xml? > > We are using Tomcat 10.1.18. Our app WAR is named secure#Foo.war. We've > always depended on the name of the WAR to name

Re: Session Cookie Logging

2024-01-25 Thread Dan McLaughlin
Well, so much for that theory. __Secure-JSESSIONID still sets the sessionCookiePath to /. I even removed the entire session-config from the web.xml and turned on copyXML to extract the secure#Foo.xml out to the conf/Catalina/localhost folder. Based on the documentation, if I don't set sessionCook

Re: Session Cookie Logging

2024-01-25 Thread Dan McLaughlin
To give more context we originally moved to use __Host-JSESSIONID but were seeing issues with the cookie getting overwritten when switching between application contexts on the same host. I thought the routeid would play a part in keeping the session cookies separate, but the browsers apparently do

Re: Session Cookie Logging

2024-01-25 Thread Dan McLaughlin
I think I just figured it out. __Host- doesn't allow for setting a path to anything other than /. It would have been nice if Tomcat would have logged an error instead of silently failing, or forcing the path to / and not saying anything. That would have saved me a ton of time. -- Thanks, Dan O

Re: Session Cookie Logging

2024-01-25 Thread Dan McLaughlin
Which one wins the catalina-base/conf/web.xml or the Webapp/WEB-INF/web.xml. I just noticed that the one under catalina base contains: 30 Or do they get merged? Thanks, Dan On Thu, Jan 25, 2024 at 7:00 PM Dan McLaughlin wrote: > Does anyone know what class we would crank the log level u

Session Cookie Logging

2024-01-25 Thread Dan McLaughlin
Does anyone know what class we would crank the log level up to see why Tomcat would ignore cookie-config in our web.xml? We are using Tomcat 10.1.18. Our app WAR is named secure#Foo.war. We've always depended on the name of the WAR to name the Context Path/Name. The only reason I'm messing with