Actually, I debugged through the code (in eclipse) end-to-end and that is how I found that it enters CXF's fromString method, which ignores the actual cookie.
We use Jersey client for consuming some REST services and CXF for serving other REST services of our own. Both happen from the same project. Though Jersey itself has a HeaderDelegate implementation, CXF's implementation class (org.apache.cxf.jaxrs.impl.NewCookieHeaderProvider, which has the fromString method) is what gets chosen because we refer to CXF's classes when the server initializes (i.e. earlier in runtime than Jersey's). -- View this message in context: http://cxf.547215.n5.nabble.com/Cookies-with-expires-directive-tp5649065p5651932.html Sent from the cxf-user mailing list archive at Nabble.com.
