topic CMIS Workbench with cookies enabled logs into Nuxeo every time in Nuxeo Forum

CMIS Workbench with cookies enabled logs into Nuxeo every time

rg1_ — Sun, 25 Aug 2013 09:31:59 GMT

Using CMIS Workbench 0.10.0 with various bindings and cookies enabled, I see a "Login Success" entry in the Nuxeo audit trail for every CMIS operation performed. I expected to see only one for the initial login. Thoughts?

Re: CMIS Workbench with cookies enabled logs into Nuxeo every time

Florent_Guillau — Thu, 29 Aug 2013 19:08:39 GMT

Could you open a JIRA ticket?

Re: CMIS Workbench with cookies enabled logs into Nuxeo every time

rg1_ — Thu, 29 Aug 2013 21:33:27 GMT

See [NXP-12358][1].

Re: CMIS Workbench with cookies enabled logs into Nuxeo every time

Florent_Guillau — Mon, 18 Nov 2013 18:05:07 GMT

This is by design, the CMIS endpoint is not designated as stateful so does not generate a (needless) HTTP session which does not create a JSESSIONID cookie.

Edit: it's possible to make an endpoint use a stateful HTTP session and therefore a cookie through some config. To do that, the <authenticationPlugin> of the authenticators extension point defining the authentication for the given URL pattern must include <stateful>true</stateful>. This is done for instance here. Compare this with the standard binding for the browser binding endpoint here.

Re: CMIS Workbench with cookies enabled logs into Nuxeo every time

rg1_ — Mon, 18 Nov 2013 22:26:03 GMT

This seems to contradict the answer provided to [this question][1]. Please clarify.

Re: CMIS Workbench with cookies enabled logs into Nuxeo every time

Florent_Guillau — Wed, 27 Nov 2013 15:48:08 GMT

Right. I updated the answer in the other question, and the above answer.