This is an automated email from the ASF dual-hosted git repository. lprimak pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/shiro-site.git
commit 133de50f89edb05eb8ed3b002e5cd5422f4c3911 Author: lprimak <[email protected]> AuthorDate: Sun May 3 00:37:14 2026 -0500 added note to for servlet-managed sessions --- src/site/content/jakarta-ee.adoc | 1 + 1 file changed, 1 insertion(+) diff --git a/src/site/content/jakarta-ee.adoc b/src/site/content/jakarta-ee.adoc index 38b360131..1ad8c5fc7 100644 --- a/src/site/content/jakarta-ee.adoc +++ b/src/site/content/jakarta-ee.adoc @@ -224,6 +224,7 @@ The module adds `ShiroFilter` to the Servlet configuration. For most cases, the ---- Ordinarily, Shiro sets session cookies to be secure, unless you are in Jakarta Faces' Development mode. Make sure to run in other than Development mode in production, so that secure cookies are used. +This only applies to Servlet Container-managed sessions, and not Shiro native sessions. + If secure session cookies are not desired, you can disable them by adding the following to `web.xml`: [source,xml] .Note: this parameter is only available in Shiro 2.1.1 or later
