[JIRA] Created: (SIDP-526) _idp_authn_lc_key Cookie Path changes when using Cookie Version 1

[avalanche333@idp.protectnetwork.org (JIRA)]

_idp_authn_lc_key Cookie Path changes when using Cookie Version 1
-----------------------------------------------------------------

                 Key: SIDP-526
                 URL: https://issues.shibboleth.net/jira/browse/SIDP-526
             Project: Shibboleth IdP 2 - Java
          Issue Type: Bug
    Affects Versions: 2.3.3
         Environment: WebSphere 7.0.0.11
            Reporter: avalanche333 at idp.protectnetwork.org
            Assignee: Chad La Joie


When using Cookie Version 1 for all cookies the cookie path is incorrect

Example:

When Cookie Version set to 1
Name: _idp_authn_lc_key
Path: /idp1/profile/SAML2/Redirect/

When Cookie Version set to 0
Name: _idp_authn_lc_key
Path: /idp1

When using Cookie version 1, the cookie is not able to be retrieved by IDP because of the path is not correct. Changing to version 0 corrects this issue.
I don't know how/when this path is modified. In code the context is correct. Its after the cookie is added to the response and written out that the path changes.

Please note version 1 of cookies is considered experimental and not recommended for production use as per javadocs in Cookie.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira