FWD » Documentation

01/02/2026

12:40 PM Support #9709: Needed: Basic example of configuring separate client and server

I rolled back @SameSite@ policy for the authorization cookie rev 16337 (9709b) by setting this property to @STRICT@ a... Sergey Ivanovskiy

12/31/2025

12:14 PM Support #9709: Needed: Basic example of configuring separate client and server

Authentication cookie is used only by @AuthHandler@ and is not used by known implementations of @SsoAuthenticator@. I... Sergey Ivanovskiy

09:45 AM Support #9709: Needed: Basic example of configuring separate client and server

We cannot require reverse proxy as a solution. Greg Shah

12/30/2025

04:56 AM Support #9709: Needed: Basic example of configuring separate client and server

It seems that using Anti-CSRF Tokens should be more easily to implement because this token can be included into html ... Sergey Ivanovskiy

12/29/2025

02:19 PM Support #9709: Needed: Basic example of configuring separate client and server

OK. Thank you for pointing on this issue. I didn't know the Cross-site request forgery (CSRF) method to steal cookies... Sergey Ivanovskiy

02:07 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Hynek, is this rev 16336 (9709b) passed the review if we don't take into account the secu... Hynek Cihlar

02:03 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Hynek Cihlar wrote:
> > Sergey Ivanovskiy wrote:
> > > Hynek, could you please explain ... Hynek Cihlar

02:02 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Why these issues were not raised when iframe with cookie were developed at the different ... Sergey Ivanovskiy

01:57 PM Support #9709: Needed: Basic example of configuring separate client and server

Why these issues were not raised when iframe with cookie were developed at the different task more earlier? The same ... Sergey Ivanovskiy

01:37 PM Support #9709: Needed: Basic example of configuring separate client and server

I don't understand why this option (ref https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/Cookies)... Sergey Ivanovskiy

01:33 PM Support #9709: Needed: Basic example of configuring separate client and server

Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > Hynek, could you please explain or develop your idea more thorou... Sergey Ivanovskiy

01:27 PM Support #9709: Needed: Basic example of configuring separate client and server

Hynek, is this rev 16336 (9709b) passed the review if we don't take into account the security issues?
I would propos... Sergey Ivanovskiy

12:49 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Hynek, could you please explain or develop your idea more thoroughly because it is not cl... Hynek Cihlar

12:02 PM Support #9709: Needed: Basic example of configuring separate client and server

Hynek, could you please explain or develop your idea more thoroughly because it is not clear for me now. The spawned ... Sergey Ivanovskiy

11:49 AM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> It seems that NONE is only option. In practice I did some tests that showed that another ... Hynek Cihlar

10:50 AM Support #9709: Needed: Basic example of configuring separate client and server

Hynek Cihlar wrote:
> Code review 9709b.
>
> Potential @NPE@, @env.get(BrokerCore.BROKER_DEDICATED_HOST)@ may in ... Sergey Ivanovskiy

08:50 AM Support #9709: Needed: Basic example of configuring separate client and server

Hynek Cihlar wrote:
> Code review 9709b.
> I'm a bit uneasy with relaxing the same-site cookie policy in @AuthHan... Sergey Ivanovskiy

07:53 AM Support #9709: Needed: Basic example of configuring separate client and server

Code review 9709b.
Potential @NPE@, @env.get(BrokerCore.BROKER_DEDICATED_HOST)@ may in theory return @null@. For s... Hynek Cihlar

12/24/2025

10:32 AM Support #9709: Needed: Basic example of configuring separate client and server

I used 9709b. Sergey Ivanovskiy

10:27 AM Support #9709: Needed: Basic example of configuring separate client and server

I have no issues with the broker setup and Java 17. My environment just simulates your environment:
1) started Virtu... Sergey Ivanovskiy

04:03 AM Support #9709: Needed: Basic example of configuring separate client and server

Roger Borrello wrote:
> Sergey Ivanovskiy wrote:
> > I did the changes in 9709b that were not reviewed yet.
> Is H... Sergey Ivanovskiy

04:01 AM Support #9709: Needed: Basic example of configuring separate client and server

For the broker setup the spawned client connects to the server via SSL and gets remote server objects and performs th... Sergey Ivanovskiy

02:06 AM Support #9709: Needed: Basic example of configuring separate client and server

Roger Borrello wrote:
> I'm interested in understanding why when we run the @ClientDriver@ at the command line (typi... Sergey Ivanovskiy

12/23/2025

06:11 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey, I seemed to have taken a step back, even though I have good certificates and passwords configured. The direct... Roger Borrello

05:39 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> https://stackoverflow.com/questions/1091945/what-characters-do-i-need-to-escape-in-xml-do... Roger Borrello

05:38 PM Support #9709: Needed: Basic example of configuring separate client and server

I'm interested in understanding why when we run the @ClientDriver@ at the command line (typically via @client.sh@), w... Roger Borrello

05:20 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> I did the changes in 9709b that were not reviewed yet.
Is Hynek the appropriate reviewer?
Roger Borrello

10:54 AM Support #9709: Needed: Basic example of configuring separate client and server

I did the changes in 9709b that were not reviewed yet. Sergey Ivanovskiy

10:51 AM Support #9709: Needed: Basic example of configuring separate client and server

We can modify @com.goldencode.p2j.security.SSLCertGenUtil@ to make it possible generate required xml files. Could you... Sergey Ivanovskiy

10:44 AM Support #9709: Needed: Basic example of configuring separate client and server

https://stackoverflow.com/questions/1091945/what-characters-do-i-need-to-escape-in-xml-documents
https://share.goo... Sergey Ivanovskiy

10:33 AM Support #9709: Needed: Basic example of configuring separate client and server

Sergey, I am working on this again and I want to recap the process to setup the certificates, because that was the bi... Roger Borrello

12/15/2025

01:49 PM Support #9709: Needed: Basic example of configuring separate client and server

Updated 9709b over the trunk up to rev. 16326. Sergey Ivanovskiy