As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.
Using CMIS Workbench 0.10.0 with various bindings and cookies enabled, I see a "Login Success" entry in the Nuxeo audit trail for every CMIS operation performed. I expected to see only one for the initial login. Thoughts?
Could you open a JIRA ticket?
See [NXP-12358][1].
This is by design, the CMIS endpoint is not designated as stateful so does not generate a (needless) HTTP session which does not create a JSESSIONID cookie.
Edit: it's possible to make an endpoint use a stateful HTTP session and therefore a cookie through some config. To do that, the <authenticationPlugin> of the authenticators extension point defining the authentication for the given URL pattern must include <stateful>true</stateful>. This is done for instance here. Compare this with the standard binding for the browser binding endpoint here.
<authenticationPlugin>
authenticators
<stateful>true</stateful>
This seems to contradict the answer provided to [this question][1]. Please clarify.
Right. I updated the answer in the other question, and the above answer.
