Re: using Servlet Filter to rewrite domain of JSESSIONID cookie?

2010-07-02 Thread André Warnier
Pid wrote: On 02/07/2010 08:31, André Warnier wrote: Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nikita, On 7/1/2010 6:37 PM, Nikita Tovstoles wrote: I borrowed "sub-domain" from Google Analytics terminology. I have one server, running one tomcat instance with on

Re: using Servlet Filter to rewrite domain of JSESSIONID cookie?

2010-07-02 Thread Pid
On 02/07/2010 08:31, André Warnier wrote: > Christopher Schultz wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> Nikita, >> >> On 7/1/2010 6:37 PM, Nikita Tovstoles wrote: >>> I borrowed "sub-domain" from Google Analytics terminology. I have one >>> server, running one tomcat instan

Re: using Servlet Filter to rewrite domain of JSESSIONID cookie?

2010-07-02 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nikita, On 7/1/2010 6:37 PM, Nikita Tovstoles wrote: I borrowed "sub-domain" from Google Analytics terminology. I have one server, running one tomcat instance with one virtual host. That host is running one app - a JS/htm

Re: using Servlet Filter to rewrite domain of JSESSIONID cookie?

2010-07-01 Thread Nikita Tovstoles
Yep, I realized as much and went exactly that route. However, i still think that altering (broadening) domain of JSESSIONID cookie is worthwhile. However, after looking at Tomcat src, it appears that creating a delegate for the internal Request is surprisingly non-trivial as there are protected fie

Re: using Servlet Filter to rewrite domain of JSESSIONID cookie?

2010-07-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nikita, On 7/1/2010 6:37 PM, Nikita Tovstoles wrote: > I borrowed "sub-domain" from Google Analytics terminology. I have one > server, running one tomcat instance with one virtual host. That host is > running one app - a JS/html widget that is embedde

Re: using Servlet Filter to rewrite domain of JSESSIONID cookie?

2010-07-01 Thread Nikita Tovstoles
I borrowed "sub-domain" from Google Analytics terminology. I have one server, running one tomcat instance with one virtual host. That host is running one app - a JS/html widget that is embedded on multiple sites. We need to track usage per-deployment (per site embedding the wiget). For (google) an

Re: using Servlet Filter to rewrite domain of JSESSIONID cookie?

2010-07-01 Thread André Warnier
Nikita Tovstoles wrote: thanks for the pointers. However, emptySessionPath - from what I can tell - only deals with paths (not domain). how could I use it do ignore subdomains? What I do not really understand in all this, is what the point is, of having the same JSESSIONID (and by extension,

Re: using Servlet Filter to rewrite domain of JSESSIONID cookie?

2010-07-01 Thread Nikita Tovstoles
thanks for the pointers. However, emptySessionPath - from what I can tell - only deals with paths (not domain). how could I use it do ignore subdomains? On Thu, Jul 1, 2010 at 2:07 AM, Rainer Jung wrote: > On 01.07.2010 03:26, Christopher Schultz wrote: > >> -BEGIN PGP SIGNED MESSAGE-

Re: using Servlet Filter to rewrite domain of JSESSIONID cookie?

2010-07-01 Thread Rainer Jung
On 01.07.2010 03:26, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nikita, On 6/30/2010 6:20 PM, Nikita Tovstoles wrote: I'd like to make session cookie domain-wide, and ignore subdomains - in Tomcat 6. You could use the emptySessionPath="true" setting in your. ht

Re: using Servlet Filter to rewrite domain of JSESSIONID cookie?

2010-06-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nikita, On 6/30/2010 6:20 PM, Nikita Tovstoles wrote: > I'd like to make session cookie domain-wide, and ignore subdomains - in > Tomcat 6. You could use the emptySessionPath="true" setting in your . http://tomcat.apache.org/tomcat-6.0-doc/config/ht

RE: using Servlet Filter to rewrite domain of JSESSIONID cookie?

2010-06-30 Thread Ralph Carlson
can you extend org.apache.catalina.connector.Response adding the HttpResponse object and its getter/setter and call that before valve.invoke() also depending on what you are putting in your cookie and if the users are logging on or not (you could also use ipaddress but that is flaky is they are