There should be a way to avoid Vaadin reliance on cookies
See original GitHub issueSee this ticket : https://github.com/vaadin/framework/issues/814
It should be possible to use Vaadin app without any reliance on cookies.
Vaadin app as any other Java servlet app set JSESSIONID
cookie on first server response to track an HTTP session.
Vaadin relies on HTTP session servlet mechanism which relies on this cookie.
Sometimes cookies don’t work: e.g. in embedding applications ( see https://github.com/vaadin/flow/issues/5769).
We should provide a way to configure the app do not rely on cookies and somehow track the session id in every request/response .
That will allow to make app working even if cookies are not supported for some reasons.
Issue Analytics
- State:
- Created 3 years ago
- Reactions:4
- Comments:30 (22 by maintainers)
Top Results From Across the Web
Top 5 most common Vaadin performance pitfalls and how to ...
Top 5 most common Vaadin performance pitfalls and how to avoid them · Pitfall 1: Eagerly building components that might never be displayed....
Read more >Remove Requirement for Browser Cookie - Vaadin
Is there a way to disable the requirement for cookies so that no browser will be stopped from hitting the site?
Read more >Frequently Asked Questions about Vaadin
There are two ways you can build a Vaadin app: the Flow and Hilla frameworks. If you are familiar with Java programming, you'll...
Read more >Speed up your development with the Vaadin Acceleration Kits
The Kit helps developers using blue/green deployments to gracefully notify users and allow them to switch to a new version once they're ready....
Read more >JWT authentication with Vaadin Flow - for better developer ...
It is easiest to transfer the token using a cookie (instead of a header), to avoid intercepting (and adding Authorization header) requests that...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
In this case as we claim that we have embedding support and did not already explicitly mention that it is not supported cross domain in Safari, I’m willing to rule this out as an bug as we have a good idea how to fix this for those users who are relying to get this fixed.
What about support of the URL-based session tracking? Vaadin doesn’t support this at the moment - it will endlessly reload the page and eventually will give up stating “Cookies disabled”. SSL session tracking is unreliable as discussed above. Sounds to me that cookie-based session tracking is the only way. I’ve added docs rgd this to https://mvysny.github.io/the-dreaded-vaadin-session-has-expired/