You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@knox.apache.org by "Istvan Toth (Jira)" <ji...@apache.org> on 2024/05/10 12:36:00 UTC
[jira] [Commented] (KNOX-3033) Make it possible to set the correct path for sticky cookies instead of appending the role name
[ https://issues.apache.org/jira/browse/KNOX-3033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17845330#comment-17845330 ]
Istvan Toth commented on KNOX-3033:
-----------------------------------
My current patch seems to work.
< Set-Cookie: KNOX_BACKEND=58d004bcaccfddfdc69739ea053505c69b2679d6fc1da6f7e46d3907be2d1e6c; Path=/gateway/cdp-proxy-api-stoty/hbase; Secure; HttpOnly
It still needs more tests and some cleanup.
> Make it possible to set the correct path for sticky cookies instead of appending the role name
> ----------------------------------------------------------------------------------------------
>
> Key: KNOX-3033
> URL: https://issues.apache.org/jira/browse/KNOX-3033
> Project: Apache Knox
> Issue Type: Bug
> Components: Server
> Reporter: Istvan Toth
> Assignee: Istvan Toth
> Priority: Major
> Time Spent: 10m
> Remaining Estimate: 0h
>
> I have tried to override the sticky session cookie name by using the following HA parameter:
> {noformat}
> <param>
> <name>WEBHBASE</name>
> <value>enableStickySession=true;noFallback=true;enableLoadBalancing=true;stickySessionCookieName=STICKYCOOKIE</value>
> </param>
> {noformat}
> However, KNOX still appended the service name to the cookie name:
> {noformat}
> 24/04/30 08:25:11 DEBUG http.wire: http-outgoing-0 << "Set-Cookie: STICKYCOOKIE-WEBHBASE=58d004bcaccfddfdc69739ea053505c69b2679d6fc1da6f7e46d3907be2d1e6c; Path=/gateway/cdp-proxy-api-stoty; Secure; HttpOnly[\r][\n]"
> {noformat}
> AFAICT the point of overriding the cookie name would be integrating with other components (like a cloud LB) that expect a specific cookie name.
> Appending the service name after the specified cooke name defeats this.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)