Jboss 5.1 HttpOnly cookies , unable to logIn to the system

166 views Asked by At

I added following line to my context.xml as discussed in This question and now all my cookies were set to secure and httponly.

but now when i logged in to the system it throw me out and said my session got expired.

system is running on 'Http' and is there anything i missed here?

Thank you in advance.

1

There are 1 answers

0
Sam On

I fixed this issue by using <SessionCookie httpOnly="true" /> instead of <SessionCookie secure="true" httpOnly="true"/>