[JIRA] (IDP-1872) Use __Host- prefix cookie names to ensure cookies come from the host

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on IDP-1872 ( https://shibboleth.atlassian.net/browse/IDP-1872?atlOrigin=eyJpIjoiZjlmYzAwMWZhYzg1NGNhOTgwMTQ3MzA5MTU5YjU2OTQiLCJwIjoiaiJ9 )

Re: Use __Host- prefix cookie names to ensure cookies come from the host ( https://shibboleth.atlassian.net/browse/IDP-1872?atlOrigin=eyJpIjoiZjlmYzAwMWZhYzg1NGNhOTgwMTQ3MzA5MTU5YjU2OTQiLCJwIjoiaiJ9 )

I don’t really understand what you’re asking for here, I’m going to need a clearer explanation. The cookies are scoped however you want them to be generally speaking. If domain isn’t set, they are host only. The path is also configurable.

It may be that this is a bug in the area of this particular cookie (we didn’t write any of that code, SWITCH did) so it may need some attention, but in general the properties are configurable. The names are not, and that’s not really a goal.

It might be best to maybe focus on any other cookie that isn’t this one. If there’s no issue there, than perhaps the bug is “this one isn’t honoring the settings”?

( https://shibboleth.atlassian.net/browse/IDP-1872#add-comment?atlOrigin=eyJpIjoiZjlmYzAwMWZhYzg1NGNhOTgwMTQ3MzA5MTU5YjU2OTQiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-1872#add-comment?atlOrigin=eyJpIjoiZjlmYzAwMWZhYzg1NGNhOTgwMTQ3MzA5MTU5YjU2OTQiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100183- sha1:51e3c50 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20211022/317ed516/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-76ea5335-9919-45a4-a91c-82522d9b09ca
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211022/317ed516/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-40eebfb6-9336-4f7e-b992-d5e54a57dc03
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211022/317ed516/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-55381bd2-c8f6-4c5a-a84a-7846b6264b62
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211022/317ed516/attachment-0005.png>