Skip to content

Commit 3930d00

Browse files
committed
utils: fix invalid JSESSIONID cookie in https setup
When enable.secure.session.cookie is set to true, use cannot login with error ``` 2024-10-25T09:03:33,898 DEBUG [c.c.u.HttpUtils] (qtp384617262-21:[ctx-a3ee3670]) (logid:7c5bfd8d) jsessionidFromCookie = node017ygldpe44nub1frmqafsj0qmc18 2024-10-25T09:03:33,898 DEBUG [c.c.u.HttpUtils] (qtp384617262-21:[ctx-a3ee3670]) (logid:7c5bfd8d) session.getId() = node017ygldpe44nub1frmqafsj0qmc18 2024-10-25T09:03:33,898 ERROR [c.c.u.HttpUtils] (qtp384617262-21:[ctx-a3ee3670]) (logid:7c5bfd8d) JSESSIONID from cookie is invalid. ```
1 parent 175eed2 commit 3930d00

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

utils/src/main/java/com/cloud/utils/HttpUtils.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -117,7 +117,7 @@ public static boolean validateSessionKey(final HttpSession session, final Map<St
117117
}
118118
final String jsessionidFromCookie = HttpUtils.findCookie(cookies, "JSESSIONID");
119119
if (jsessionidFromCookie == null
120-
|| !(jsessionidFromCookie.startsWith(session.getId() + '.'))) {
120+
|| !(jsessionidFromCookie.equals(session.getId()) || jsessionidFromCookie.startsWith(session.getId() + '.'))) {
121121
s_logger.error("JSESSIONID from cookie is invalid.");
122122
return false;
123123
}

0 commit comments

Comments
 (0)