jenkinsci / jenkinsci/http-request-plugin
[JENKINS-70481] Invalid cookie header messages using AWS ALB/ELB
- Dominant language
- Java
- Stars
- 176
- Forks
- 158
- Avg merge
- 1d 16h
- Merged PRs (30d)
- 3
Description
When requesting URLs running behind an AWS ALB/ELB using the http-request-plugin we see a lot of warning messages in the Jenkins log complaining about invalid cookie processing in the response header:
2023-01-24 09:16:37.330+0000 [id=95914] WARNING o.a.h.c.p.ResponseProcessCookies#processCookies: Invalid cookie header: "Set-Cookie: AWSALBCORS=E3VWCTTOR7dHNMAdWkYCw8JVy03+y8oXKPv/nfEqw5+rotNkRQR3RcwWe0OgDwtRKr2+5Zlr27xruQfyzzp5tSOg4bcbLtwwzyvI92VO/KWrwZzXzS81Ldvl3UA1; Expires=Tue, 31 Jan 2023 09:16:37 GMT; Path=/; SameSite=None; Secure". Invalid 'expires' attribute: Tue, 31 Jan 2023 09:16:37 GMT
It seems that either the http-request-plugin or the dependent apache-httpcomponents-client-4-api-plugin does not set a CookieSpecs in the RequestConfig properly.
For similar issue see: https://github.com/splunk/splunkforjenkins/issues/10
---
Originally reported by tracetronic, imported from: Invalid cookie header messages using AWS ALB/ELB
Raw content of original issue
When requesting URLs running behind an AWS ALB/ELB using the http-request-plugin we see a lot of warning messages in the Jenkins log complaining about invalid cookie processing in the response header:
2023-01-24 09:16:37.330+0000 [id=95914] WARNING o.a.h.c.p.ResponseProcessCookies#processCookies: Invalid cookie header: "Set-Cookie: AWSALBCORS=E3VWCTTOR7dHNMAdWkYCw8JVy03+y8oXKPv/nfEqw5+rotNkRQR3RcwWe0OgDwtRKr2+5Zlr27xruQfyzzp5tSOg4bcbLtwwzyvI92VO/KWrwZzXzS81Ldvl3UA1; Expires=Tue, 31 Jan 2023 09:16:37 GMT; Path=/; SameSite=None; Secure". Invalid 'expires' attribute: Tue, 31 Jan 2023 09:16:37 GMT
It seems that either the http-request-plugin or the dependent apache-httpcomponents-client-4-api-plugin does not set a CookieSpecs in the RequestConfig properly.
For similar issue see: https://github.com/splunk/splunkforjenkins/issues/10
Contributor guide
Assessment
This issue has not been assessed yet.