Bug #14597: Setting session prefix and length fails with combined session tracking - Wt - Redmine

Actions

Copy link

Bug #14597

open

WW RM

Setting session prefix and length fails with combined session tracking

Bug #14597: Setting session prefix and length fails with combined session tracking

Added by Wojciech Wil 2 months ago. Updated 18 days ago.

Status:

Implemented @Emweb

Priority:

Normal

Assignee:

Romain Mardulyn

Target version:

4.14.2

Start date:

06/15/2026

Due date:

% Done:

Estimated time:

Description

Running hello example like so

../../build/examples/hello/hello.wt --docroot . --session-id-prefix=0 --http-listen 0.0.0.0:8080 -c ../../wt_config.xml.in

Where in example config file wt_config.xml.in the only changes are <session-id-length>15</session-id-length> and <tracking>Combined</tracking>. The goal was to have wtd with the same total length=16 but with '0' as prefix. When entering app in the browser it is stuck in infinite loop of creating new sessions. Wt version 4.11.4.

This seems to fix the issue in that case

--- a/src/web/WebController.C
+++ b/src/web/WebController.C
@@ -724,7 +724,7 @@ void WebController::handleRequest(WebRequest *request)
   if (conf_.sessionTracking() == Configuration::Combined)
     multiSessionCookie = sessionFromCookie(request->headerValue("Cookie"),
                                            "ms" + request->scriptName(),
-                                           conf_.sessionIdLength());
+                                           conf_.fullSessionIdLength());
 
   if (sessionId.empty() && wtdE)
     sessionId = *wtdE;