Branch: refs/heads/backport/stable-17.4.x/pr-4653
Home:
https://github.com/xwiki/xwiki-platform
Commit: f47de89ac140e97f98df53543283c226616a9c29
https://github.com/xwiki/xwiki-platform/commit/f47de89ac140e97f98df53543283…
Author: Michael Hamann <michael.hamann(a)xwiki.com>
Date: 2025-10-10 (Fri, 10 Oct 2025)
Changed paths:
M
xwiki-platform-core/xwiki-platform-export/xwiki-platform-export-pdf/xwiki-platform-export-pdf-default/src/main/java/org/xwiki/export/pdf/internal/browser/AuthenticationCookieFilter.java
M
xwiki-platform-core/xwiki-platform-export/xwiki-platform-export-pdf/xwiki-platform-export-pdf-default/src/test/java/org/xwiki/export/pdf/internal/browser/AuthenticationCookieFilterTest.java
M
xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-test/xwiki-platform-flamingo-skin-test-docker/src/test/it/org/xwiki/flamingo/test/docker/LoginIT.java
M
xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/user/impl/xwiki/MyPersistentLoginManager.java
Log Message:
-----------
XWIKI-23586: Users are logged out after the server session expires even if the
"Remember Me" option is ticked on Tomcat 11 (#4653)
* Add an automated test to verify that the user is only logged out when
explicitly logging out but not when the session expires.
* Use the standard API to set cookies instead of constructing a custom
header with the value wrongly wrapped in quotes that aren't removed
anymore in Tomcat 11, causing the regression.
* Adjust the cookie filtering code for PDF export.
* Turn the cookie filtering unit test more into an integration test with the
persistent login manager to ensure that it catches any future changes.
(cherry picked from commit d44bf7d7d0d88bf9e91b8cc79fbc09d95ff190e7)
To unsubscribe from these emails, change your notification settings at
https://github.com/xwiki/xwiki-platform/settings/notifications