[JIRA] Closed: (SIDP-526) _idp_authn_lc_key Cookie Path changes when using Cookie Version 1

[Chad La Joie (JIRA)]

     [ https://issues.shibboleth.net/jira/browse/SIDP-526?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Chad La Joie closed SIDP-526.
-----------------------------

    Resolution: Invalid

Please submit a bug to your container provider.  Our code has no ability to influence what it does to cookies.

> _idp_authn_lc_key Cookie Path changes when using Cookie Version 1
> -----------------------------------------------------------------
>
>                 Key: SIDP-526
>                 URL: https://issues.shibboleth.net/jira/browse/SIDP-526
>             Project: Shibboleth IdP 2 - Java
>          Issue Type: Bug
>    Affects Versions: 2.3.3
>         Environment: WebSphere 7.0.0.11
>            Reporter: avalanche333 at idp.protectnetwork.org
>            Assignee: Chad La Joie
>   Original Estimate: 1 hour
>  Remaining Estimate: 1 hour
>
> When using Cookie Version 1 for all cookies the cookie path is incorrect
> Example:
> When Cookie Version set to 1
> Name: _idp_authn_lc_key
> Path: /idp1/profile/SAML2/Redirect/
> When Cookie Version set to 0
> Name: _idp_authn_lc_key
> Path: /idp1
> When using Cookie version 1, the cookie is not able to be retrieved by IDP because of the path is not correct. Changing to version 0 corrects this issue.
> I don't know how/when this path is modified. In code the context is correct. Its after the cookie is added to the response and written out that the path changes.
> Please note version 1 of cookies is considered experimental and not recommended for production use as per javadocs in Cookie.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira