You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@knox.apache.org by "Larry McCay (JIRA)" <ji...@apache.org> on 2016/03/08 20:34:40 UTC

[jira] [Created] (KNOX-688) KnoxSSO should not result in a valid JSESSIONID

Larry McCay created KNOX-688:
--------------------------------

             Summary: KnoxSSO should not result in a valid JSESSIONID
                 Key: KNOX-688
                 URL: https://issues.apache.org/jira/browse/KNOX-688
             Project: Apache Knox
          Issue Type: Improvement
          Components: Server
            Reporter: Larry McCay
            Assignee: Larry McCay


The use of the KnoxSSO service should not allow for authentication caching with the session via JSESSIONID. At least not by default.

This improvement will allow session to be enabled for edge cases where this is required but by default will invalidate the created session upon cookie creation. The cookie will represent the session for these usecases and will not have any associated server side state.




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)