[java-identity-provider] branch master updated: IDP-1223 - IdPv3 defaults to insecure cookies

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=60ee11ffde699d5281208104535cd4fd86f545a0

The following commit(s) were added to refs/heads/master by this push:
       new  60ee11f   IDP-1223 - IdPv3 defaults to insecure cookies
60ee11f is described below

commit 60ee11ffde699d5281208104535cd4fd86f545a0
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Wed Sep 27 21:11:53 2017 -0400

    IDP-1223 - IdPv3 defaults to insecure cookies
    
    https://issues.shibboleth.net/jira/browse/IDP-1223
    
    Add note to property file.
---
 idp-conf/src/main/resources/conf/idp.properties | 1 +
 1 file changed, 1 insertion(+)

diff --git a/idp-conf/src/main/resources/conf/idp.properties b/idp-conf/src/main/resources/conf/idp.properties
index 8ff8219..745107d 100644
--- a/idp-conf/src/main/resources/conf/idp.properties
+++ b/idp-conf/src/main/resources/conf/idp.properties
@@ -12,6 +12,7 @@ idp.entityID = https://idp.example.org
 idp.scope = example.org
 
 # General cookie properties (maxAge only applies to persistent cookies)
+# Note the default for idp.cookie.secure, you will usually want it set.
 #idp.cookie.secure = false
 #idp.cookie.httpOnly = true
 #idp.cookie.domain =

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.