My stack is as follows.
Tomcat 7.0.40
Servlet-api 3.0.1
Shiro 1.2.2
Spring 3.1.2
I've added this directive into the web.xml
<session-config>
<tracking-mode>COOKIE</tracking-mode>
</session-config>
Shiro configuration
SessionManager = DefaultWebSessionManager.
SessionManager.sessionDAO = EnterpriseCacheSessionDAO
But I still get http requests with ;JSESSIONID=[ID]
For example.
https://localhost/static/logo.png;JSESSIONID=d59603d5-5a94-4679-95b1-53c8495e1d4e
This can break the url and cause a 404.
Any thoughts?