How do I remove the jsessionid from URLs in JBoss EAP?
Issue
- For security or other requirements at times there is a need to remove the
jsessionidcompletely from any generated URLs. The default behaviour of the servlet container is to pass thejsessionidvia the URL and a cookie on the first request that accesses the session. In that case, if the client rejects the cookie, or cookies are not enabled, the session can still be tied to the request via thejsessionidin the URL.
Environment
- Red Hat JBoss Enterprise Application Platform (EAP)
- 4.x
- 5.x
- 6.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Close
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.