M
Michael Jacobs
Guest
OK. Your primary task is to get your client to automatically echo the JSESSIONID cookie back to the server where it will be used to grant you access to the REST resources. The number of hops between your client and the backend REST service can be variable. I can tell you that when the backend REST service issues a SET-COOKIE named JSESSIONID, it will require that COOKIE returned or it will begin a new client authentication process. The httponly will only provide you client code access to the cookie. So, as you say, that will not help you.
Continue reading...
Continue reading...