[
https://issues.apache.org/jira/browse/KNOX-3033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17844715#comment-17844715
]
Istvan Toth edited comment on KNOX-3033 at 5/9/24 4:19 AM:
-----------------------------------------------------------
We are injecting serviceRole into
org.apache.knox.gateway.dispatch.DefaultDispatch somewhere.
Looks like if we can inject the service URL list the same way, we could set the
cookie path correctly.
The problem is that some services seem to have multiple URLs, so we would have
to choose the real one by matching the actual URL.
was (Author: stoty):
We are injecting serviceRole org.apache.knox.gateway.dispatch.DefaultDispatch
somewhere.
Looks like if we can inject the service URL list the same way, we could set the
cookie path correctly.
The problem is that some services seem to have multiple URLs, so we would have
to choose the real one by matching the actual URL.
> the service name is appended to explicitly set stickySessionCookieName
> ----------------------------------------------------------------------
>
> Key: KNOX-3033
> URL: https://issues.apache.org/jira/browse/KNOX-3033
> Project: Apache Knox
> Issue Type: Bug
> Components: Server
> Reporter: Istvan Toth
> Priority: Major
>
> I have tried to override the sticky session cookie name by using the
> following HA parameter:
> {noformat}
> <param>
> <name>WEBHBASE</name>
>
> <value>enableStickySession=true;noFallback=true;enableLoadBalancing=true;stickySessionCookieName=STICKYCOOKIE</value>
> </param>
> {noformat}
> However, KNOX still appended the service name to the cookie name:
> {noformat}
> 24/04/30 08:25:11 DEBUG http.wire: http-outgoing-0 << "Set-Cookie:
> STICKYCOOKIE-WEBHBASE=58d004bcaccfddfdc69739ea053505c69b2679d6fc1da6f7e46d3907be2d1e6c;
> Path=/gateway/cdp-proxy-api-stoty; Secure; HttpOnly[\r][\n]"
> {noformat}
> AFAICT the point of overriding the cookie name would be integrating with
> other components (like a cloud LB) that expect a specific cookie name.
> Appending the service name after the specified cooke name defeats this.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
