Details
-
Bug
-
Status: Closed
-
Normal
-
Resolution: Fixed
-
2.24.01, 2.26.00
-
None
Description
When Tomcat is configured to use HttpOnly session cookies, the keepalive call in the template composer no longer works.
HttpOnly session cookies are enabled in Tomcat's context.xml file, as follows:
<Context useHttpOnly="true">
The template composer checks whether the current session is valid, and only executes the keepalive call when that's the case. However, with HttpOnly session cookies you cannot access the session cookie from JavaScript anymore. The check therefore always fails, and the ping is no longer executed.