Re: Remember Me problems with Safari and IE 7

The problem turns out to be Tomcat related.  Here are the Set-Cookie  
headers.

With 6.0.16
Set-Cookie: username=Une/tPQZ7PI=; Expires=Sat, 04-Oct-2008 22:44:44 GMT

With 6.0.18
Set-Cookie: username="Une/tPQZ7PI="; Version=1; Max-Age=86400

I was having troubles with Firefox working with the 6.0.16 version and  
Safari and IE had troubles with the 6.0.18 version.   6.0.16 is a  
version 0 cookie while 6.0.18 is a version 1 cookie.  The problem with  
version 0 cookies is that a cookie value with a '=' in it, as is the  
case with the username and password cookie values from SecurityFilter,  
causes ambiguity surrounding which part of the string is the name of  
the cookie and which part is the value.
   The hack I have in place now is a servlet filter removes the  
cookies from the browser and then uses response.addHeader() to  
manually write the Set-Cookie header with the a cookie version 0  
compatible value.
   I hope this gets fixed in Tomcat 6.0.20.
   -M@

On Oct 4, 2008, at 4:18 PM, Torgeir Veimo wrote:

>
> On 1 Oct 2008, at 08:42, Matthew Hixson wrote:
>
>> Yes.  Upon logging out I have the username and password cookies, but
>> not validation nor rememberme.  Safari also shows no expiration time
>> for username and password.
>
> We have a slightly modified securityfilter codebase in use here, with
> no problems under safari 3, ie6/7/8 etc.
>
> I'm wondering if you're running your webapps under a context path in
> your servlet container? From recollection, we had to patch some
> security filter class to get the cookies set with the correct path.
> (Should be request.getContextPath()).
>
> -- 
> Torgeir Veimo
> [email protected]
>
>
>
>
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's  
> challenge
> Build the coolest Linux based applications with Moblin SDK & win  
> great prizes
> Grand prize is a trip for two to an Open Source event anywhere in  
> the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> securityfilter-user mailing list
> securityfilter-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> https://lists.sourceforge.net/lists/listinfo/securityfilter-user
>


-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/