Re: Max-Age=0 in Set-Cookie headers

On 22/11/2024 13:26, Marcel Steinbeck wrote: With Tomcat 11.0.0-M19 and later, Rfc6265CookieProcessor omits the Max-Age attribute during serialization if its value is 0. The change is traced to this commit: d16e846 Omitting Max-Age=0 is unexpected because according to RFC-6265 Section 5.2.2:

Max-Age=0 in Set-Cookie headers

With Tomcat 11.0.0-M19 and later, Rfc6265CookieProcessor omits the Max-Age attribute during serialization if its value is 0. The change is traced to this commit: d16e846 Omitting Max-Age=0 is unexpected because according to RFC-6265 Section 5.2.2: [...] If delta-seconds is less than or equal to