ALSB Proxies Dropping Session Cookies For Arpt Set-Cookie Header (Doc ID 888615.1)

Last updated on AUGUST 12, 2024

Applies to:

Symptoms

When ALSB receives multiple HTTP headers with same name "Set-Cookie", ALSB is passing only one cookie on Set-Cookie header and dropping the other one.

EXPECTED BEHAVIOR
All the cookies though they have same name should be allowed by ALSB

STEPS
The issue can be reproduced at will with the following steps:

The basic idea here is to point your Business Service to any URI that will deliver 2 or more
cookies, observe that only 1 cookie will be recognized by ALSB

1. Create a new HTTP business service with a URI pointing to http://www.yahoo.com (by default
this URI will deliver more than three cookies).

2. Save and activate this new business service and launch the test browser to test. In your
response data you can observe that only one out of the four cookies are received.

Note: Http servers response can vary for each Http client. Browser request is different from JVM Http client request. Http server's response depends on the http header "User-Agent"

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.