-
Notifications
You must be signed in to change notification settings - Fork 1.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix parsing of JSESSIONID only #10479
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Wish we would use @Deprecated
better, especially considering what the javadoc for that annotation says.
jetty-core/jetty-session/src/main/java/org/eclipse/jetty/session/AbstractSessionManager.java
Outdated
Show resolved
Hide resolved
jetty-core/jetty-session/src/main/java/org/eclipse/jetty/session/AbstractSessionManager.java
Outdated
Show resolved
Hide resolved
Co-authored-by: Joakim Erdfelt <[email protected]>
@joakime oops I dismissed your review accidentally after accepting your suggestions! |
jetty-core/jetty-session/src/main/java/org/eclipse/jetty/session/AbstractSessionManager.java
Outdated
Show resolved
Hide resolved
jetty-core/jetty-session/src/main/java/org/eclipse/jetty/session/AbstractSessionManager.java
Outdated
Show resolved
Hide resolved
jetty-core/jetty-session/src/main/java/org/eclipse/jetty/session/AbstractSessionManager.java
Outdated
Show resolved
Hide resolved
jetty-core/jetty-session/src/main/java/org/eclipse/jetty/session/AbstractSessionManager.java
Outdated
Show resolved
Hide resolved
jetty-core/jetty-session/src/main/java/org/eclipse/jetty/session/AbstractSessionManager.java
Outdated
Show resolved
Hide resolved
jetty-ee9/jetty-ee9-nested/src/test/java/org/eclipse/jetty/ee9/nested/SessionHandlerTest.java
Show resolved
Hide resolved
Co-authored-by: Jan Bartel <[email protected]>
if (!session.getId().equals(getSessionIdManager().getId(id))) | ||
{ | ||
if (LOG.isDebugEnabled()) | ||
LOG.debug("Multiple different valid session ids: {}, {}", requestedSessionId, id); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think you've got all the info to be able to output the source of the ids, isn't it something like:
LOG.debug("Multiple different valid session ids: {} from cookie {}, {} from cookie {}", requestedSessionId, requestedSessionIdFromCookie, id, i < cookieIds);
And similar for the other DEBUG log messages.
better debug and exception messages
Improve the parsing of jsessionid parameters and unify with handling of JSESSIONID.
More tests added.