session-cookies

In ICs, can`t get cookie

╄→尐↘猪︶ㄣ 提交于 2019-12-13 05:57:36
问题 cookie return always null... In android 2.x this works well, but 4.0.4 ICS not works ConnectivityManager manager = (ConnectivityManager) mContext .getSystemService(Context.CONNECTIVITY_SERVICE); CookieManager cookie = CookieManager.getInstance(); if(cookie.getCookie(mContext.getString(R.string.host_url))!=null){ conn.setRequestProperty("Cookie", cookie.getCookie(mContext.getString(R.string.host_url))); Log.d("tag", "cookie get " + cookie.getCookie(mContext.getString(R.string.host_url))); } in

Session Cookie secure/httponly

丶灬走出姿态 提交于 2019-12-13 04:46:43
问题 I was searching the internet quite a time but I didn't find a satisfying answer to my question. I have to get a json object from a certain http site. I do this with a get-request over http (site is available only over http). The site responds with a session cookie: Set-Cookie: session_id=95656983e1feaff45a000aa7f2f9093a1ea4b1c3; expires=Fri, 20 Apr 2018 14:00:51 GMT; httponly; Max-Age=3600; Path=/; secure My first question is why the cookie is sent over http when httponly & secure flag are

Spring Security - How to disable same session sharing across multiple tabs of same browser?

一世执手 提交于 2019-12-13 04:37:12
问题 As we know Spring Security is providing JSESSIONID in cookie, based session management solution,it is allowing sharing same JSESSIONID information across multiple tabs of same browser. As per OWASP guideline, It should not share. Is there any way to disable this sharing in spring security? 回答1: My first idea was "It is not really possible to prevent the browser from doing so." But then I found this You can use HTML5 SessionStorage (window.sessionStorage). You will generate a random id and

CI 2.0.3 session heisenbug: session is lost after some time 20 minutes, only on server redirect, nothing suspicious in the logs

生来就可爱ヽ(ⅴ<●) 提交于 2019-12-13 04:19:38
问题 I can't seem to make any progress with this one. My CI session settings are these: $config['sess_cookie_name'] = 'ci_session'; $config['sess_expiration'] = 0; $config['sess_expire_on_close'] = FALSE; $config['sess_encrypt_cookie'] = FALSE; $config['sess_use_database'] = TRUE; $config['sess_table_name'] = 'ci_sessions'; $config['sess_match_ip'] = FALSE; $config['sess_match_useragent'] = FALSE; $config['sess_time_to_update'] = 7200; $config['cookie_prefix'] = ""; $config['cookie_domain'] = "";

ProxyPassReverseCookieDomain equivalent for IIS

倾然丶 夕夏残阳落幕 提交于 2019-12-13 04:19:01
问题 I use IIS and URL rewrite as a reverseProxy. My actual webapplication is hosted on a server which is not directly accessible to the internet. In the rewrite rules I replace the host name of the reverse Proxy with the local IP address. This works fine. However, the application I use provides downloads. Once the client makes a download request a server side process redirects to the actual download file. This is where I have issues. It seems like the session cookie (JSESSIONID) is not correctly

Unable to Set Variable from within ExpressJS res.locals.connection.query() statement

微笑、不失礼 提交于 2019-12-13 03:57:20
问题 I am attempting to create a Single Sign-On feature that checks if a user is already provisioned, and either Creates a user or updates the database with the latest information. I have gotten the update/insert working, but now I am unable to return the users id (uid or UserID), from the query. I have left several of the things I have tried commented in the section. Basically, the query that does the insert/update is nested inside of another, which is inside of the post_assert. I need the value

Session sharing between contexts doesn't work on Tomcat 7

落花浮王杯 提交于 2019-12-13 02:28:40
问题 Based on the below SO post, I am trying to share session between two application contexts (on the same Tomcat instance). Sharing session data between contexts in Tomcat I have created two webapps like the following to test this. (Each webapp contains only a servlet and a web.xml) WebApp-1 Servlet public class App1Servlet extends HttpServlet { @Override public void doGet(HttpServletRequest request, HttpServletResponse response){ HttpSession session = request.getSession(true); session

Orbeon security doesn't work correctly for orbeon embedded api

ぐ巨炮叔叔 提交于 2019-12-13 02:07:08
问题 I set up j_security_check with form authentication on my orbeon app and it works fine. Orbeon is under URL https://localhost:8444/orbeon/. The problem is that I have embedded orbeon API in my jsp page which is under URL https://localhost:8444/BackOffice/form.jsp. On this page I display some orbeon form and when I try to go to this jsp page login page pop up instead. I changed the cookie path to / (instead of /orbeon ) in web.xml: <session-config> <session-timeout>60</session-timeout> <cookie

Cookies set in a redirect response are not persisted

删除回忆录丶 提交于 2019-12-13 01:38:16
问题 This appears to be a related issue only on iOS: since updating React Native from 0.55 to 0.57. adding credentials: 'include' helps, but this flag does not help if you reopen the app. Cookie will be deleted after app relaunch. Below link actually proposes a PR release around this, but even that is not resolving the error. https://github.com/facebook/react-native/commit/a6860487947ae0957f5dfa4979e92bc7740fecb0 This is addition to the file react-native/Libraries/Network/RCTHTTPRequestHandler.mm