My stack is as follows.

Tomcat 7.0.40
Servlet-api 3.0.1
Shiro 1.2.2
Spring 3.1.2

I've added this directive into the web.xml

<session-config>
        <tracking-mode>COOKIE</tracking-mode>
</session-config>

Shiro configuration

SessionManager = DefaultWebSessionManager.
SessionManager.sessionDAO = EnterpriseCacheSessionDAO

But I still get http requests with ;JSESSIONID=[ID]

For example.

https://localhost/static/logo.png;JSESSIONID=d59603d5-5a94-4679-95b1-53c8495e1d4e

This can break the url and cause a 404.

Any thoughts?

Reply via email to