Re: Not able to make JSESSIONID cookie secure

Mark, On 1/4/21 03:17, Mark Thomas wrote: On 04/01/2021 06:02, Amit Khosla wrote: Hi, We are still facing this issue. Can someone please help us? In a clean 8.5.x install, session cookies are only marked as secure if the request that triggered the session creation is made over a secure chann

Re: Sometimes HttpServletRequest#asyncStart throws IllegalStateException

On 04/01/2021 13:27, Nicolò Boschi wrote: > Hi all, > > I faced a problem while using asynchronous computing of the HTTP requests > My code is really simple > > AsyncContext asyncContext = request.startAsync(request, response); > > If I interrupt the request from the client, I got > > > java.l

Sometimes HttpServletRequest#asyncStart throws IllegalStateException

Hi all, I faced a problem while using asynchronous computing of the HTTP requests My code is really simple AsyncContext asyncContext = request.startAsync(request, response); If I interrupt the request from the client, I got java.lang.IllegalStateException: Calling [asyncStart()] is not valid f

Re: Not able to make JSESSIONID cookie secure

On 04/01/2021 06:02, Amit Khosla wrote: > Hi, > > We are still facing this issue. Can someone please help us? In a clean 8.5.x install, session cookies are only marked as secure if the request that triggered the session creation is made over a secure channel (typically HTTPS). If you amend the s