Author: jleroux
Date: Wed Sep 27 12:30:25 2017
New Revision: 1809838
URL: http://svn.apache.org/viewvc?rev=1809838&view=rev
Log:
Improved: Add session tracking mode and make cookie secure
(OFBIZ-6655)
This completes r1809687, no need to secure when deleting. I will not backport
Modified:
ofbiz/ofbiz-framework/trunk/applications/order/src/main/java/org/apache/ofbiz/order/shoppinglist/ShoppingListEvents.java
ofbiz/ofbiz-framework/trunk/framework/webapp/src/main/java/org/apache/ofbiz/webapp/control/LoginWorker.java
Modified:
ofbiz/ofbiz-framework/trunk/applications/order/src/main/java/org/apache/ofbiz/order/shoppinglist/ShoppingListEvents.java
URL:
http://svn.apache.org/viewvc/ofbiz/ofbiz-framework/trunk/applications/order/src/main/java/org/apache/ofbiz/order/shoppinglist/ShoppingListEvents.java?rev=1809838&r1=1809837&r2=1809838&view=diff
==============================================================================
---
ofbiz/ofbiz-framework/trunk/applications/order/src/main/java/org/apache/ofbiz/order/shoppinglist/ShoppingListEvents.java
(original)
+++
ofbiz/ofbiz-framework/trunk/applications/order/src/main/java/org/apache/ofbiz/order/shoppinglist/ShoppingListEvents.java
Wed Sep 27 12:30:25 2017
@@ -689,8 +689,6 @@ public class ShoppingListEvents {
Cookie guestShoppingListCookie = new Cookie(guestShoppingUserName,
null);
guestShoppingListCookie.setMaxAge(0);
guestShoppingListCookie.setPath("/");
- guestShoppingListCookie.setSecure(true);
- guestShoppingListCookie.setHttpOnly(true);
response.addCookie(guestShoppingListCookie);
return "success";
}
Modified:
ofbiz/ofbiz-framework/trunk/framework/webapp/src/main/java/org/apache/ofbiz/webapp/control/LoginWorker.java
URL:
http://svn.apache.org/viewvc/ofbiz/ofbiz-framework/trunk/framework/webapp/src/main/java/org/apache/ofbiz/webapp/control/LoginWorker.java?rev=1809838&r1=1809837&r2=1809838&view=diff
==============================================================================
---
ofbiz/ofbiz-framework/trunk/framework/webapp/src/main/java/org/apache/ofbiz/webapp/control/LoginWorker.java
(original)
+++
ofbiz/ofbiz-framework/trunk/framework/webapp/src/main/java/org/apache/ofbiz/webapp/control/LoginWorker.java
Wed Sep 27 12:30:25 2017
@@ -758,8 +758,6 @@ public class LoginWorker {
Cookie autoLoginCookie = new
Cookie(getAutoLoginCookieName(request), userLogin.getString("userLoginId"));
autoLoginCookie.setMaxAge(0);
autoLoginCookie.setPath("/");
- autoLoginCookie.setSecure(true);
- autoLoginCookie.setHttpOnly(true);
response.addCookie(autoLoginCookie);
}
// remove the session attributes
