Spring Cloud Zuul does not forward cookies

cookies spring-boot netflix-zuul spring-cloud-netflix
Erikson Murrugarra picture Erikson Murrugarra · May 23, 2016 · Viewed 12.3k times · Source

I am facing a problem with spring cloud Zuul proxy. I hace two microservices configured, up and running. I have a cookie in my web browser and I am using Zuul as an API Gateway, When I hit Zuul to call my Backend, Zuul is not forwarding my cookie to my Backend, It seems that Zuul is ignoring the cookie sent and my Backend is not able to retrieve this.

Can you please help me with this issue?, I am using Spring cloud Brixton.RELEASE and spring boot 1.3.5

Regards.

Answer

Dan C picture Dan C · Jun 15, 2016

In Spring Cloud Netflix 1.1, "Cookies" is included in the sensitive headers list and they are not passed down.

This can be manipulated by config zuul.routes.*.sensitiveHeaders.

See documentation details here under heading "Cookies and Sensitive Headers":

http://cloud.spring.io/spring-cloud-netflix/spring-cloud-netflix.html

Related questions

How to set same-site cookie flag in Spring Boot?

Is it possible to set Same-Site Cookie flag in Spring Boot? My problem in Chrome: A cookie associated with a cross-site resource at http://google.com/ was set without the SameSite attribute. A future release of Chrome will only deliver …

Read More
Spring: Unable to set SameSite cookie to None

I'm unable to set SameSite cookie value to None. Following is how i'm generating ResponseCookie object. ResponseCookie cookie = ResponseCookie.from("Hb", cookieUserId) .maxAge(!isEmpty(cookieUserId) ? MAX_COOKIE_DURATION : 0) .domain("test.com") .sameSite("None") .secure(true) .path("/") .build(); response.addCookie(cookie) …

Read More
How to set SameSite and Secure attribute to JSESSIONID cookie

I have a Spring Boot Web Application (Spring boot version 2.0.3.RELEASE) and running in an Apache Tomcat 8.5.5 server. With the recent security policy which has imposed by Google Chrome (Rolled out since 80.0), it is requested to apply the new SameSite …

Read More