update cookie settings in java client (#2930)

Signed-off-by: craman <chandrasekhar.raman@yahooinc.com>
Co-authored-by: craman <chandrasekhar.raman@yahooinc.com>

Author: chandrasekhar1996

clients/java/msd/src/main/java/com/yahoo/athenz/msd/MSDRDLGeneratedClient.java

@@ -137,6 +137,8 @@ public void addCredentials(final String header, final String token) {
             CookieStore cookieStore = new BasicCookieStore();
             BasicClientCookie cookie = new BasicClientCookie(header.substring(7), token);
             cookie.setPath(baseUrl);
+            cookie.setHttpOnly(true);
+            cookie.setSecure(true);
             cookieStore.addCookie(cookie);
             httpContext.setAttribute(HttpClientContext.COOKIE_STORE, cookieStore);
             credsHeader = null;

clients/java/zms/src/main/java/com/yahoo/athenz/zms/ZMSRDLGeneratedClient.java

@@ -137,6 +137,8 @@ public void addCredentials(final String header, final String token) {
             CookieStore cookieStore = new BasicCookieStore();
             BasicClientCookie cookie = new BasicClientCookie(header.substring(7), token);
             cookie.setPath(baseUrl);
+            cookie.setHttpOnly(true);
+            cookie.setSecure(true);
             cookieStore.addCookie(cookie);
             httpContext.setAttribute(HttpClientContext.COOKIE_STORE, cookieStore);
             credsHeader = null;

clients/java/zts/src/main/java/com/yahoo/athenz/zts/ZTSRDLGeneratedClient.java

@@ -137,6 +137,8 @@ public void addCredentials(final String header, final String token) {
             CookieStore cookieStore = new BasicCookieStore();
             BasicClientCookie cookie = new BasicClientCookie(header.substring(7), token);
             cookie.setPath(baseUrl);
+            cookie.setHttpOnly(true);
+            cookie.setSecure(true);
             cookieStore.addCookie(cookie);
             httpContext.setAttribute(HttpClientContext.COOKIE_STORE, cookieStore);
             credsHeader = null;

rdl/rdl-gen-athenz-java-client/javaclient.go

@@ -252,6 +252,8 @@ public class {{cName}}Client {
             CookieStore cookieStore = new BasicCookieStore();
             BasicClientCookie cookie = new BasicClientCookie(header.substring(7), token);
             cookie.setPath(baseUrl);
+            cookie.setHttpOnly(true);
+            cookie.setSecure(true);
             cookieStore.addCookie(cookie);
             httpContext.setAttribute(HttpClientContext.COOKIE_STORE, cookieStore);
             credsHeader = null;