Agreed, it should be a easy enough test to write, can you give us an example of the cookie body. My guess the apps are using different secrets (the one not defined is a random key, but that one does’t set a cookie), so its the decryption that is failing.
If you are using the same set of cookies between apps you should configure Shiro the same on both apps. -Brian (mobile) > On Jul 19, 2019, at 3:39 AM, Philip Whitehouse <[email protected]> wrote: > > AIOOBE is not a helpful error regardless of config - we should still improve > that... > > Best, > > Philip Whitehouse > >> On 19 Jul 2019, at 09:35, jubax <[email protected]> wrote: >> >> Brian Demers wrote >>> What cookies are set? >>> >>> -Brian >> >> I just noticed: We have two versions of our application running in the same >> Tomcat at the same time. The old version does not use RememberMe, but the >> new one does. >> >> The error seems to occur only when I choose the RememberMe option in the new >> version. After that I always get the ArrayIndexOutOfBoundsException in the >> old version. >> >> So this might be just a misconfiguration somewhere. I guess I was not aware >> that different webapps can affect each other in this way. >> >> Any ideas what I configured wrong? >> >> Thanks, >> >> Jürgen >> >> >> >> -- >> Sent from: http://shiro-user.582556.n2.nabble.com/ >
