Branch: refs/heads/backport/stable-17.4.x/pr-4653 Home: https://github.com/xwiki/xwiki-platform Commit: f47de89ac140e97f98df53543283c226616a9c29 https://github.com/xwiki/xwiki-platform/commit/f47de89ac140e97f98df53543283… Author: Michael Hamann <michael.hamann(a)xwiki.com> Date: 2025-10-10 (Fri, 10 Oct 2025) Changed paths: M xwiki-platform-core/xwiki-platform-export/xwiki-platform-export-pdf/xwiki-platform-export-pdf-default/src/main/java/org/xwiki/export/pdf/internal/browser/AuthenticationCookieFilter.java M xwiki-platform-core/xwiki-platform-export/xwiki-platform-export-pdf/xwiki-platform-export-pdf-default/src/test/java/org/xwiki/export/pdf/internal/browser/AuthenticationCookieFilterTest.java M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-test/xwiki-platform-flamingo-skin-test-docker/src/test/it/org/xwiki/flamingo/test/docker/LoginIT.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/user/impl/xwiki/MyPersistentLoginManager.java Log Message: ----------- XWIKI-23586: Users are logged out after the server session expires even if the "Remember Me" option is ticked on Tomcat 11 (#4653) * Add an automated test to verify that the user is only logged out when explicitly logging out but not when the session expires. * Use the standard API to set cookies instead of constructing a custom header with the value wrongly wrapped in quotes that aren't removed anymore in Tomcat 11, causing the regression. * Adjust the cookie filtering code for PDF export. * Turn the cookie filtering unit test more into an integration test with the persistent login manager to ensure that it catches any future changes. (cherry picked from commit d44bf7d7d0d88bf9e91b8cc79fbc09d95ff190e7) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications