You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@shiro.apache.org by Dominic Farr <do...@gmail.com> on 2014/02/13 14:48:28 UTC

Why is JSESSIONID on any URL?

My stack is as follows.

Tomcat 7.0.40
Servlet-api 3.0.1
Shiro 1.2.2
Spring 3.1.2

I've added this directive into the web.xml

<session-config>
        <tracking-mode>COOKIE</tracking-mode>
</session-config>

Shiro configuration

SessionManager = DefaultWebSessionManager.
SessionManager.sessionDAO = EnterpriseCacheSessionDAO

But I still get http requests with ;JSESSIONID=[ID]

For example.

https://localhost/static/logo.png;JSESSIONID=d59603d5-5a94-4679-95b1-53c8495e1d4e

This can break the url and cause a 404.

Any thoughts?

Re: Why is JSESSIONID on any URL?

Posted by versatec <ro...@versatec.de>.

I did the tracking-mode thing in web.xml, too, and I see the same behavior.
Yet, neither do I have an explanation for it.

glassfish 4.0
javax.servlet-api, 3.1.0
Mojarra 2.2.5
shiro 1.2.2
Grizzly Framework 2.3.1
WELD 2.0.0 (SP1)



--
View this message in context: http://shiro-user.582556.n2.nabble.com/Why-is-JSESSIONID-on-any-URL-tp7579643p7579648.html
Sent from the Shiro User mailing list archive at Nabble.com.