[
https://issues.apache.org/jira/browse/KNOX-3033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17845330#comment-17845330
]
Istvan Toth edited comment on KNOX-3033 at 5/13/24 10:03 AM:
-------------------------------------------------------------
My current patch seems to work.
When I set the new _UseContextForStickyCookiePath_ property, I get:
{noformat}
< Set-Cookie:
KNOX_BACKEND=58d004bcaccfddfdc69739ea053505c69b2679d6fc1da6f7e46d3907be2d1e6c;
Path=/gateway/cdp-proxy-api-stoty/hbase; Secure; HttpOnly
{noformat}
It still needs more tests and some cleanup.
was (Author: stoty):
My current patch seems to work.
< Set-Cookie:
KNOX_BACKEND=58d004bcaccfddfdc69739ea053505c69b2679d6fc1da6f7e46d3907be2d1e6c;
Path=/gateway/cdp-proxy-api-stoty/hbase; Secure; HttpOnly
It still needs more tests and some cleanup.
> Add option to set the correct path for sticky session cookies instead of
> appending the role name
> ------------------------------------------------------------------------------------------------
>
> Key: KNOX-3033
> URL: https://issues.apache.org/jira/browse/KNOX-3033
> Project: Apache Knox
> Issue Type: Bug
> Components: Server
> Reporter: Istvan Toth
> Assignee: Istvan Toth
> Priority: Major
> Time Spent: 10m
> Remaining Estimate: 0h
>
> I have tried to override the sticky session cookie name by using the
> following HA parameter:
> {noformat}
> <param>
> <name>WEBHBASE</name>
>
> <value>enableStickySession=true;noFallback=true;enableLoadBalancing=true;stickySessionCookieName=STICKYCOOKIE</value>
> </param>
> {noformat}
> However, KNOX still appended the service name to the cookie name:
> {noformat}
> 24/04/30 08:25:11 DEBUG http.wire: http-outgoing-0 << "Set-Cookie:
> STICKYCOOKIE-WEBHBASE=58d004bcaccfddfdc69739ea053505c69b2679d6fc1da6f7e46d3907be2d1e6c;
> Path=/gateway/cdp-proxy-api-stoty; Secure; HttpOnly[\r][\n]"
> {noformat}
> AFAICT the point of overriding the cookie name would be integrating with
> other components (like a cloud LB) that expect a specific cookie name.
> Appending the service name after the specified cooke name defeats this.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
