0

I logged in my site. Cookie created correctly.

I see JSESSIONID and SPRING_SECURITY_REMEMBER_ME_COOKIE (at this moment Its name is testMecook). It's ok

Then, I close my browser, then open it. And SPRING_SECURITY_REMEMBER_ME_COOKIE field removed. Why?

My config spring security is

<http pattern="/resources" security="none" />

<http use-expressions="true" disable-url-rewriting="true">
    <intercept-url pattern="/" access="permitAll"/>

    <form-login login-page="/users/login"
                authentication-failure-url="/users/loginfail"
                default-target-url="/"/>

    <access-denied-handler error-page="/users/denied"/>

    <logout logout-success-url="/" delete-cookies="JSESSIONID, testMecook"/>

    <remember-me key="TestCOOK" services-ref="rememberMeService"/>

    <anonymous/>
</http>

<authentication-manager erase-credentials="false">
    <authentication-provider ref="authenticationProvider"/>
</authentication-manager>

<beans:bean id="rememberMeService"
            class="org.xxx.security.CustomRememberMeService">
    <beans:property name="key" value="TestCOOK"/>
    <beans:property name="userDetailsService" ref="customUserDetailsService"/>
    <beans:property name="cookieName" value="testMecook"/>
</beans:bean>

<beans:bean id="authenticationProvider"
            class="org.xxx.security.provider.UserAuthenticationProvider"/>

<beans:bean id="customUserDetailsService"
            class="org.xxx.security.provider.UserDetailsServiceImpl"/>

1 Answer 1

0

I think your config looks normal. It's probably your browser that deletes cookies after closing it. Check the related settings in your browser, and make sure it doesn't clear cookies on exit.

1

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.