HTTPS login not saving the JSESSIONID in a cookie [closed]

This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, visit the help center.

Closed 7 years ago.

We recently changed our login to use HTTPS, and we are experiencing issues with the login.

After the login, the user is redirected to an unencrypted (HTTP) page. When it reaches this page, the site checks if the user is logged in. It creates a new session and it appears that the user is not logged in, and thus our user is redirected to the login page. If the user logs in again, it will work.

The cookies are not set as https-only, but it seems like they don't work on http pages.

Does anyone know why this might be happening.

Edit:

I should have mentioned that the page that displays the login is on a different URL. (There is a login page from the machine running the tomcat instance, but the marketing site is on a wordpress install and uses a different domain).

I can't use the HTTP request first method to set the cookie, because the default Internet Explorer settings prevent the session cookie from being saved.

задан partkyle 19 October 2010 в 05:45

0 ответов

Другие вопросы по тегам:

security http tomcat cookies https

HTTPS login not saving the JSESSIONID in a cookie [closed]

0 ответов

Похожие вопросы: