You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@commons.apache.org by Tom Muldoon <to...@firstbest.com> on 2007/04/13 21:35:32 UTC

[http-client] Does HttpClient support the HttpOnly cookie attribute?

It appears that the HttpOnly cookie attribute is not recognized by the 
CookieSpec class (in both HttpClient 3.0 and 3.1rc). i.e. the following 
message is logged ...

    CookieSpec - Unrecognized cookie attribute: name=HttpOnly, value=null

This appears to be a bit of a show stopper, as the server redirects the 
subsequent request back to the Login page after a seemingly successful 
login. In looking at the cookie that is included in the subsequent 
request, the HttpOnly attribute is missing altogether.

So, does HttpClient support HttpOnly cookie attribute???

Thanks in advance,

Tom


---------------------------------------------------------------------
To unsubscribe, e-mail: commons-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: commons-user-help@jakarta.apache.org