question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

There should be a way to avoid Vaadin reliance on cookies

See original GitHub issue

See this ticket : https://github.com/vaadin/framework/issues/814

It should be possible to use Vaadin app without any reliance on cookies.

Vaadin app as any other Java servlet app set JSESSIONID cookie on first server response to track an HTTP session. Vaadin relies on HTTP session servlet mechanism which relies on this cookie. Sometimes cookies don’t work: e.g. in embedding applications ( see https://github.com/vaadin/flow/issues/5769). We should provide a way to configure the app do not rely on cookies and somehow track the session id in every request/response . That will allow to make app working even if cookies are not supported for some reasons.

Issue Analytics

  • State:closed
  • Created 3 years ago
  • Reactions:4
  • Comments:30 (22 by maintainers)

github_iconTop GitHub Comments

1reaction
plekucommented, Apr 14, 2020

In this case as we claim that we have embedding support and did not already explicitly mention that it is not supported cross domain in Safari, I’m willing to rule this out as an bug as we have a good idea how to fix this for those users who are relying to get this fixed.

0reactions
mvysnycommented, Aug 25, 2021

What about support of the URL-based session tracking? Vaadin doesn’t support this at the moment - it will endlessly reload the page and eventually will give up stating “Cookies disabled”. SSL session tracking is unreliable as discussed above. Sounds to me that cookie-based session tracking is the only way. I’ve added docs rgd this to https://mvysny.github.io/the-dreaded-vaadin-session-has-expired/

Read more comments on GitHub >

github_iconTop Results From Across the Web

Top 5 most common Vaadin performance pitfalls and how to ...
Top 5 most common Vaadin performance pitfalls and how to avoid them · Pitfall 1: Eagerly building components that might never be displayed....
Read more >
Remove Requirement for Browser Cookie - Vaadin
Is there a way to disable the requirement for cookies so that no browser will be stopped from hitting the site?
Read more >
Frequently Asked Questions about Vaadin
There are two ways you can build a Vaadin app: the Flow and Hilla frameworks. If you are familiar with Java programming, you'll...
Read more >
Speed up your development with the Vaadin Acceleration Kits
The Kit helps developers using blue/green deployments to gracefully notify users and allow them to switch to a new version once they're ready....
Read more >
JWT authentication with Vaadin Flow - for better developer ...
It is easiest to transfer the token using a cookie (instead of a header), to avoid intercepting (and adding Authorization header) requests that...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found