• Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

Tomcat 7 session.invalidate() doesn't work when setting sessionCookiePath="/" in context.xml

 
cc won
Greenhorn
Posts: 1
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi,

I am trying to assign a new session id after user login by calling session.invalidate() method.

In JAVA_HOME/conf/context.xml as following:

<Context sessionCookiePath="/">
</Context>

The above configuration doesn't re-new session id when session.invalidate() is called in the Servlet.

If remove sessionCookiePath="/" in in JAVA_HOME/conf/context.xml as following:

<Context>
</Context>

By calling session.invalidate() method, a new session id will be assigned.

Is there a workaround or missing configuration.

Thanks
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic