Search code examples
cookiesoauthweblogic

Cookie secure with OAuth and weblogic

I have implemented an authentication solution using OAuth.

Everything was ok, but I added the tag cookie-secure in my weblogic.xml file. Now the cookie is not set and the session is not created.

This is the code I added and that is causing the error.

<wls:session-descriptor>
    <wls:persistent-store-type>replicated_if_clustered</wls:persistent-store-type>
    <wls:cookie-http-only>true</wls:cookie-http-only>
    <wls:cookie-secure>true</wls:cookie-secure>
    <wls:url-rewriting-enabled>false</wls:url-rewriting-enabled>
</wls:session-descriptor>

Thanks in advance.

Solution

  • I was able to solve the problem by enabling the ssl listen port on my server and in firewall. The cookie-secure and cookie-http-only flags are both set to true.