Option to disable "secure" cookie when using HTTPS just for login page

XMLWordPrintable

    • 8

      Confluence's "remember me" tickbox doesn't work if the login page is secure, but the rest of the application is unsecured.

      Seraph's CookieUtils.setCookie() method create a secure cookie (ref) if the request had a secure URL, and this cookie isn't sent by the client to a non-secure address.

      The solution to this ticket is to upgrade Confluence to use Seraph to 0.10 or later.

            Assignee:
            Unassigned
            Reporter:
            Stephen Morad
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: