java ee - Mysterious HttpSession and session-config dependency -
good day. i'm developing java web app servlets\jsp using tomcat 7.0. during request client put , object session , use forward. after forward processing same request object can retreived if secure parameter false otherwise not stored in session.
<session-config> <session-timeout>15</session-timeout> <cookie-config> <http-only>true</http-only> <secure>true</secure> </cookie-config> <tracking-mode>cookie</tracking-mode> </session-config> i've figured out "...cookies can created 'secure' flag, ensures browser never transmit specified cookie on non-ssl...". i've configured tomcat use ssl, haven't helped. changing tracking mode ssl haven't helped well. how session-config , httpsession object correlate in case? problem?
Comments
Post a Comment