3.13.42 /glassfish-web-app/session-config/cookie-properties/property

name

Specify the property name of "Specifiable properties".

Type: String

No default value

N/A

Only one time

value

Specify the value of "Specifiable properties" (specifiable value).

Type: String

No default value

N/A

Only one time

cookieName

Specifies the cookie name.

Note:

When changing the HTTP cookie name that indicates the session ID.

• While changing the cookie name, you cannot specify csfcfc as the cookie name.

• You can use the characters that meet the following requirements. Using these characters ensure that the session works correctly.

  - You can use ASCII characters. However, the following characters cannot be used:

  #, (, ), <, >, @, ,, ;, :, \, /, ", [, ], ?, =, {, },

  - You cannot use spaces and control characters.

  - You cannot use "$" as the first character of a character string.

When HTTP cookie names that can be used for the web applications:

• If the web application uses HTTP cookies, the following names cannot be specified. Names are case-insensitive.

  - The HTTP cookie name used by the session ID of an HTTP session. The default value is "JSESSIONID".

  - The HTTP cookie name "csfcfc", which is used in the Java EE server.

Type: String

JSESSIONID

N/A

0 or 1 time

cookiePath

The browser sends the cookie if the pathname for the request contains this pathname. If set to slash (/), the browser sends cookies to all URLs served by Java EE Server. Set the path to a narrower mapping to limit the request URLs to which the browser sends cookies.

Type: String

<Context path at which the web module is installed>

N/A

0 or 1 time

cookieMaxAgeSeconds

Specifies the expiration time (in seconds) after which the browser expires the cookie. If this value is not set, the cookie does not expire.

Type: Integer

1 to 2147483647

No default value

N/A

0 or 1 time

cookieDomain

Specifies the domain for which the cookie is valid.

Type: String

No default value.

N/A

0 or 1 time

cookieComment

Specifies the comment that identifies the session tracking cookie in the cookie file.

Type: String

No default value.

N/A

0 or 1 time

cookieSecure

Allowed values are as follows:

• true - Sets Secure to true.

• false - Sets Secure to false.

• dynamic - The JSESSIONID cookie inherits the Secure setting of the request that initiated the session.

To set the Secure attribute of a JSESSIONIDSSO cookie, use the ssoCookieSecure virtual-server property.

Type: String

{true | false | dynamic}

dynamic

N/A

0 or 1 time

cookieHttpOnly

Specifies that the cookie is marked HTTP only.

Type: Boolean

{true | false}

No default value

N/A

0 or 1 time