[JIRA] (IDP-1872) Use __Host- prefix cookie names to ensure cookies come from the host

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *resolved* as *Done*

Think this is done. Added new properties to expose the session and SPNEGO cookie names. Added commented versions of the existing storage cookies. Added commented lines into web.xml for adjusting the name and path of the container cookie.

Tested all this under Eclipse successfully and verified the cookies and local storage key are all adjusted with the prefix and it seems to work.

Not enabling this out of the box since that would break sessions but we can consider for 5.0 and I will probably put a wiki page together on it.

Identity Provider ( https://shibboleth.atlassian.net/browse/IDP?atlOrigin=eyJpIjoiOGYyMjBiZjFkYTQ2NDJjYTlhODg5NDMyMWNmZGI0M2YiLCJwIjoiaiJ9 ) / Improvement ( https://shibboleth.atlassian.net/browse/IDP-1872?atlOrigin=eyJpIjoiOGYyMjBiZjFkYTQ2NDJjYTlhODg5NDMyMWNmZGI0M2YiLCJwIjoiaiJ9 ) IDP-1872 ( https://shibboleth.atlassian.net/browse/IDP-1872?atlOrigin=eyJpIjoiOGYyMjBiZjFkYTQ2NDJjYTlhODg5NDMyMWNmZGI0M2YiLCJwIjoiaiJ9 ) Use __Host- prefix cookie names to ensure cookies come from the host ( https://shibboleth.atlassian.net/browse/IDP-1872?atlOrigin=eyJpIjoiOGYyMjBiZjFkYTQ2NDJjYTlhODg5NDMyMWNmZGI0M2YiLCJwIjoiaiJ9 )

Change By: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) Resolution: Done Status: Open Resolved Remaining Estimate: 0 minutes Time Spent: 45 2 hours, 15 minutes

( https://shibboleth.atlassian.net/browse/IDP-1872#add-comment?atlOrigin=eyJpIjoiOGYyMjBiZjFkYTQ2NDJjYTlhODg5NDMyMWNmZGI0M2YiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-1872#add-comment?atlOrigin=eyJpIjoiOGYyMjBiZjFkYTQ2NDJjYTlhODg5NDMyMWNmZGI0M2YiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100183- sha1:0f696af )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20211110/81e32c21/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-96446d20-11ee-43a3-92a5-456bdf2d3932
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211110/81e32c21/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-9dfe21d4-8789-4419-8e78-eeb9e207abeb
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211110/81e32c21/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-e9cac019-6371-4b0f-94a3-897c6b62585f
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211110/81e32c21/attachment-0005.png>