|
From: Siri L. A. <let...@it...> - 2021-06-29 18:16:34
|
Hi,
working on project that use cosign, I've noticed that cookie time is in milliseconds if created by java filter, while is in seconds if created by mod_cosign.so.
Here is an example generated by java filter:
cosign-serv1=xWHucaNmqP9FLF-GJDB7Lft9QYTXRRIJGfo8ssL9JNuGINCB7MUANIRH3GkT+kOHNelyl1o4PAFmcEz8EeA+FwiqjA1OXh-V4Re1LOewNEUfrE-1G5DhOSthJRfk/1624979055037
and this is from mod_cosign.so:
cosign-serv2=BW5qU8OSJ7e3ldPxzVbccT3BJt8bR4hy43CoaNah8ALS+IEtqCDzLYzLWR7Qb9Bier5O-Q-MTQiKRleiCcxBpRTS7wwEjnJOrwnwuc4+OdwTEg-OkYNmAaEXWVMZ/1624979069
If mod_cosign.so manages a cookie created by the java application it has unpredictable behavior due to this line:
cookietime = atoi( misc );
where cookietime is an int.
At the moment to work around this problem I have defined two distinct services.
I've also tested this change to cosign_auth function in filters/apache2/mod_cosign.c:
/* if it's a stale cookie, give out a new one */
gettimeofday( &now, NULL );
(void)strtok( my_cookie, "/" );
if (( misc = strtok( NULL, "/" )) != NULL ) {
dim = strlen(misc);
if (dim > 10) misc[10] = '\0';
cookietime = atoi( misc );
}
if (( cookietime > 0 ) && ( now.tv_sec - cookietime ) > cfg->expiretime ) {
goto redirect;
}
With this I can share cookie created by java application in virtualhost protected by mod_cosign.so.
I haven't tested if the java filter fails by receiving a cookie created by mod_cosign.so.
I would like to know if it is a choice not to be able to have services implemented with different technologies and which share the cookie.
Thanks in advance
[cid:image002.png@01D76D16.7ADAD9B0]
[cid:image003.jpg@01D76D10.FB2CCAC0]
Letizia Angela Siri
Software Engineer
Open Network & Platform
Italtel S.p.A.
Via Reiss Romoli
20019 Settimo Milanese - MI - Italy
email: let...@it...<mailto:let...@it...>
P: +39 0243881 - +39 0243887195
www.italtel.com<http://www.italtel.com/>
[cid:image004.jpg@01D76D10.FB2CCAC0]<http://www.linkedin.com/company/italtel?trk=top_nav_home> [cid:image005.png@01D76D10.FB2CCAC0] <http://www.twitter.com/intent/follow?original_referer=http://twitter.com/goodies2Fbuttons&screen_name=italtel&source=followbutton&variant=2.0> [cid:image006.jpg@01D76D10.FB2CCAC0] <https://www.instagram.com/italtel_hq/> [cid:image007.png@01D76D10.FB2CCAC0] <http://www.youtube.com/user/ItaltelChannel>
|