How can I prevent spring-security from appending ;jsessionid=XXX to login redirects?
In Spring Security 3.0.0 M1 or newer you could set disable-url-rewriting=”true” in the <http> namespace. See if that helps. Also see this feature request.
In Spring Security 3.0.0 M1 or newer you could set disable-url-rewriting=”true” in the <http> namespace. See if that helps. Also see this feature request.
I’ve just discovered that the files godaddy supplied with my certificate are both intermediate certificates (in fact they seem to both be the same intermediate certificate). I got the correct root and intermediate certificates by double clicking on my certificate and looking at the certificate path… from here I could also download each of these … Read more
According to your logs, C:\Users\Ing.Girbson BIJOU\Documents\NetBeansProjects\apache-tomcat-10.0.4-windows-x64\apache-tomcat-10.0.4\conf\Catalina\localhost\VirtualStore.xml you’re thus using Tomcat 10.x which is based off Servlet API version 5.0 which in turn is part of Jakarta EE version 9. However, this exception is unexpected: java.lang.NoClassDefFoundError: javax/servlet/ServletRequestListener Basically, the deployed web application is looking for javax.servlet.*, but it should actually be looking for jakarta.servlet.*. Namely, the … Read more
You will not refresh after but just before. When executing the login action first do: HttpSession session = request.getSession(false); if (session!=null && !session.isNew()) { session.invalidate(); } Then do: HttpSession session = request.getSession(true); // create the session // do the login (store the user in the session, or whatever) FYI what you are solving with this … Read more
work stores compiled JSPs and other assets. => You only need to “clean” the webapp directories under it on the rare occasions when an update to a WebApp is not picked up. temp is used to store files created using the Java File API for creating temporary files. => You can “clean” it every time … Read more
What Tomcat needs is the certificate and its private key. The certificate is public information that any of your user can see, but the private key should be yours only: this is what prevents others from running a website with your certificate. By importing MyCompany.der, you’re only importing the certificate. You would need to find … Read more
At the time of writing this, the current version of Tomcat 7 (7.0.41) has a built-in CORS filter http://tomcat.apache.org/tomcat-7.0-doc/config/filter.html#CORS_Filter
You have to check if you have the folder with name manager inside the folder webapps in your tomcat. Rubens-MacBook-Pro:tomcat rfanjul$ ls -la webapps/ total 16 drwxr-xr-x 8 rfanjul staff 272 21 May 12:20 . drwxr-xr-x 14 rfanjul staff 476 21 May 12:22 .. -rw-r–r–@ 1 rfanjul staff 6148 21 May 12:20 .DS_Store drwxr-xr-x 19 … Read more
You can, but it’s not meant to happen that way. Tomcat is a servlet-container, and only application servers are required to support EJB. Tomcat with integrated EJB support is basically TomEE. Replace Tomcat by TomEE. You can keep using the Tomcat server plugin in IDE to manage TomEE.
In debug mode in eclipse by default, break on uncaught exceptions is checked. Since you don’t have a catch method here, it’s likely that an uncaught exception is being thrown and the debugger is breaking for you immediately before the exception is thrown. You can turn it off in preferences under Java->Debug.