Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Http client not accepting the latest RFC 6265 standards (outdated) #180

Open
moabu opened this issue Feb 13, 2020 · 0 comments
Open

Http client not accepting the latest RFC 6265 standards (outdated) #180

moabu opened this issue Feb 13, 2020 · 0 comments

Comments

@moabu
Copy link
Member

moabu commented Feb 13, 2020

Im getting an error from apache http client when using an application load balancer on AWS which uses the Expires attribute.

oxTrust

2020-02-12 10:40:09,575 WARN  [qtp859417998-9] [org.apache.http.client.protocol.ResponseProcessCookies] (ResponseProcessCookies.java:130) - Invalid cookie header: "Set-Cookie: AWSALB=xhg6eWQ3jbjs9Cu4wXO1DxHDibSdvDpWp/Mu14OTerUwr0/cu5mKm4Uf1hWXwCy3NENCj/L2sNAntHwpZ3y+Y1CIshOm7k+Vo4xxyR7HudfH9zjIu7d5PR7Cv5Bz; Expires=Wed, 19 Feb 2020 10:40:09 GMT; Path=/". Invalid 'expires' attribute: Wed, 19 Feb 2020 10:40:09 GMT

oxAuth

2020-02-12 11:10:35,617 ERROR [qtp859417998-18] [org.gluu.oxauth.auth.Authenticator] (Authenticator.java:628) - Failed to get attributes from session

Can we please fix this both the MAX-AGE and Expire are RFC 6265 compliant.
This needs to be addressed in most of our services oxpassport, oxshibboleth , oxtrust, oxauth, radius, oxd-server, casa

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant