掲示板
Allow configuration of sessionid value
12年前 に Bijan Vakili によって更新されました。
Allow configuration of sessionid value
Expert 投稿: 375 参加年月日: 09/03/10 最新の投稿
Hi,
Liferay uses default "jsessionid" instead of value of configurable property "org.apache.catalina.SESSION_COOKIE_NAME" for the session id cookie. I've created following LPS to fix this so that Liferay uses the configuration as opposed to hardcoded value:
http://issues.liferay.com/browse/LPS-23475
One simple solution that has worked so far for me is to simply change com.liferay.portal.util.CookieKeys.JSESSIONID = "jsessionid" to following:
However, there are a couple other files that have "jsessionid" hardcoded value. For example:
com.liferay.portal.servlet.filters.session.SessionIdServletRequest._JSESSIONID = "JSESSIONID";
and
com.liferay.portal.util.PortalImpl._JSESSIONID = ";jsessionid=";
and
/html/js/liferay/util.js
What do you think is the best way to patch these files to use the configuration property System.getProperty("org.apache.catalina.SESSION_COOKIE_NAME", "jsessionid");?
Thanks.
Bijan
Liferay uses default "jsessionid" instead of value of configurable property "org.apache.catalina.SESSION_COOKIE_NAME" for the session id cookie. I've created following LPS to fix this so that Liferay uses the configuration as opposed to hardcoded value:
http://issues.liferay.com/browse/LPS-23475
One simple solution that has worked so far for me is to simply change com.liferay.portal.util.CookieKeys.JSESSIONID = "jsessionid" to following:
public static final String JSESSIONID =
System.getProperty(
"org.apache.catalina.SESSION_COOKIE_NAME", "jsessionid");
However, there are a couple other files that have "jsessionid" hardcoded value. For example:
com.liferay.portal.servlet.filters.session.SessionIdServletRequest._JSESSIONID = "JSESSIONID";
and
com.liferay.portal.util.PortalImpl._JSESSIONID = ";jsessionid=";
and
/html/js/liferay/util.js
What do you think is the best way to patch these files to use the configuration property System.getProperty("org.apache.catalina.SESSION_COOKIE_NAME", "jsessionid");?
Thanks.
Bijan
12年前 に Sandeep Nair によって更新されました。
RE: Allow configuration of sessionid value
Liferay Legend 投稿: 1744 参加年月日: 08/11/06 最新の投稿
Will this be available in Glassfish, websphere, weblogic or is it just Tomcat specific
Regards,
Sandeep
Regards,
Sandeep
12年前 に Bijan Vakili によって更新されました。
RE: Allow configuration of sessionid value
Expert 投稿: 375 参加年月日: 09/03/10 最新の投稿
Sandeep,
All should be supported. You make a good point because my suggestion only works for Tomcat. Servlet Spec 3.0 seems to provide the SessionCookieConfig class :
http://docs.oracle.com/javaee/6/api/javax/servlet/SessionCookieConfig.html
In that case, I hope Liferay utilizes the configuration provided by Servlet Spec to properly allow configuration of session tracking cookie.
Thanks.
All should be supported. You make a good point because my suggestion only works for Tomcat. Servlet Spec 3.0 seems to provide the SessionCookieConfig class :
http://docs.oracle.com/javaee/6/api/javax/servlet/SessionCookieConfig.html
In that case, I hope Liferay utilizes the configuration provided by Servlet Spec to properly allow configuration of session tracking cookie.
Thanks.
12年前 に Mika Koivisto によって更新されました。
RE: Allow configuration of sessionid value
Liferay Legend 投稿: 1519 参加年月日: 06/08/07 最新の投稿
Liferay still has to work with Servlet spec 2.3 so I don't see us adding that until ALL the appserver versions we support are Servlet spec 3.0 compliant.
12年前 に Bijan Vakili によって更新されました。
RE: Allow configuration of sessionid value
Expert 投稿: 375 参加年月日: 09/03/10 最新の投稿
Hi Mika,
It makes sense for Liferay to postpone action on this until all the App Servers upgrade to 3.0. In the meanwhile, anyone who wants to can simply create an EXT plugin to achieve this as in the original post.
Thanks for your insightful comment.
It makes sense for Liferay to postpone action on this until all the App Servers upgrade to 3.0. In the meanwhile, anyone who wants to can simply create an EXT plugin to achieve this as in the original post.
Thanks for your insightful comment.
9年前 に Jeff Gorris によって更新されました。
RE: Allow configuration of sessionid value
New Member 投稿: 1 参加年月日: 15/01/08 最新の投稿
Has the status of this issue changed?
We would like to be able to configure the sessionid cookie name, among other things.
We are on Liferay 6.1.20.-ee-ga2
We would like to be able to configure the sessionid cookie name, among other things.
We are on Liferay 6.1.20.-ee-ga2
9年前 に Bijan Vakili によって更新されました。
RE: Allow configuration of sessionid value
Expert 投稿: 375 参加年月日: 09/03/10 最新の投稿
Hi Jeff, per Mika's answer, I guess not:
Since compatibility matrix shows:
For Liferay Portal 6.1 EE, that WebLogic 10 is supported. However, WebLogic 10 implements Servlet spec 2.5, not spec 3.0, per their documentation:
http://docs.oracle.com/cd/E13222_01/wls/docs100/notes/new.html#wp1065403
The same is true of 6.2 EE; since WebLogic 11g also implements Servlet spec 2.5 (wonder what Oracle was doing between those two releases? I don't know, but I'm guessing it was marketing move.)
Perhaps Liferay 7 brings this feature. For future note, look at below issue:
https://issues.liferay.com/browse/LPS-23475
LPS-23475 tracks this feature request and should reflect latest on this front.
Mika Koivisto:
Liferay still has to work with Servlet spec 2.3 so I don't see us adding that until ALL the appserver versions we support are Servlet spec 3.0 compliant.
Since compatibility matrix shows:
For Liferay Portal 6.1 EE, that WebLogic 10 is supported. However, WebLogic 10 implements Servlet spec 2.5, not spec 3.0, per their documentation:
http://docs.oracle.com/cd/E13222_01/wls/docs100/notes/new.html#wp1065403
The same is true of 6.2 EE; since WebLogic 11g also implements Servlet spec 2.5 (wonder what Oracle was doing between those two releases? I don't know, but I'm guessing it was marketing move.)
Perhaps Liferay 7 brings this feature. For future note, look at below issue:
https://issues.liferay.com/browse/LPS-23475
LPS-23475 tracks this feature request and should reflect latest on this front.
9年前 に Mika Koivisto によって更新されました。
RE: Allow configuration of sessionid value
Liferay Legend 投稿: 1519 参加年月日: 06/08/07 最新の投稿
Everyone wanting this feature should go vote for the ticket as it currently has zero votes.
9年前 に Bijan Vakili によって更新されました。
RE: Allow configuration of sessionid value
Expert 投稿: 375 参加年月日: 09/03/10 最新の投稿Mika Koivisto:
Everyone wanting this feature should go vote for the ticket as it currently has zero votes.
Hi Mika, I don't see the vote option (PFA screenshot, no vote button there.)
Thank you for the suggestion anyway.
9年前 に Olaf Kock によって更新されました。
RE: Allow configuration of sessionid value
Liferay Legend 投稿: 6403 参加年月日: 08/09/23 最新の投稿Bijan Vakili:
Hi Mika, I don't see the vote option (PFA screenshot, no vote button there.)
I've notified the Jira Admins to check if we have a misconfiguration there. Please try again soon.
9年前 に Mika Koivisto によって更新されました。
RE: Allow configuration of sessionid value
Liferay Legend 投稿: 1519 参加年月日: 06/08/07 最新の投稿
It might be also that the ticket creator is not allowed to vote for their own issue.
9年前 に Olaf Kock によって更新されました。
RE: Allow configuration of sessionid value
Liferay Legend 投稿: 6403 参加年月日: 08/09/23 最新の投稿
m(
Ouch, missed that. Embarrassing.
I put in a vote on your behalf.
Ouch, missed that. Embarrassing.
I put in a vote on your behalf.
9年前 に Bijan Vakili によって更新されました。
RE: Allow configuration of sessionid value
Expert 投稿: 375 参加年月日: 09/03/10 最新の投稿
Hi Mika, you're absolutely correct. At the time, I thought to check more issues; but by chance all of them were closed (but I didn't pay attention at time); and so I couldn't vote on them either; so I thought I cannot vote there. I see I can vote on open issues right now.
Olaf, thank you for the upvote on this
By the way, I like Radio Liferay; especially now that can listen there (see attached picture for what I my meaning.) In fact, I did same thing for my blog now
Olaf, thank you for the upvote on this
By the way, I like Radio Liferay; especially now that can listen there (see attached picture for what I my meaning.) In fact, I did same thing for my blog now
添付ファイル: