You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@knox.apache.org by "Sandeep More (Jira)" <ji...@apache.org> on 2020/12/08 21:57:00 UTC

[jira] [Resolved] (KNOX-2479) set-cookie headers broken when spaces between attributes are missing

     [ https://issues.apache.org/jira/browse/KNOX-2479?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sandeep More resolved KNOX-2479.
--------------------------------
    Resolution: Fixed

> set-cookie headers broken when spaces between attributes are missing
> --------------------------------------------------------------------
>
>                 Key: KNOX-2479
>                 URL: https://issues.apache.org/jira/browse/KNOX-2479
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Server
>            Reporter: Sandeep More
>            Assignee: Sandeep More
>            Priority: Major
>             Fix For: 1.6.0
>
>          Time Spent: 1h
>  Remaining Estimate: 0h
>
> The assumption here is that SET-COOKIE header returned to Knox will always have spaces between the fields 
> e.g.
> {code:java}
> SESSION=e69d3d08-7452-45cb-90bb-9cdde3fa1342; Path=/; HttpOnly{code}
> Which is not the case when CM returns the SET-COOKIE header
> {code:java}
> SESSION=e69d3d08-7452-45cb-90bb-9cdde3fa1342;Path=/;HttpOnly
> {code}
> Which breaks the Knox logic. 
> Examples in RFC [https://tools.ietf.org/html/rfc6265#section-2.2] have whitespace but they do not specify format. Since CM uses it and it was working up until now Knox should be fixed to support it.  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)