How to disable long-lived HTTP cookie

Hi,

Does anyone know how to disable long-lived HTTP cookie

Our internal security policy banned the use of cookies for authentification.

When the file $catalina_home/atlassian-jira/WEB-INF/classes/jira-application.properties was still in use, set

jira.option.allowcookies=false

desactivated long-lived HTTP cookie and hid checkbox

I could set

&lt;init-param&gt;
    &lt;param-name&gt;autologin.cookie.age&lt;/param-name&gt;
    &lt;param-value&gt;0&lt;/param-value&gt;
&lt;/init-param&gt;

but checkbox will still display. And it's a little bit ugly :(

Sincerely

F.P

1 answer

Community moderators have prevented the ability to post new answers.

1 vote

Answer accepted

Hi Fabrice,

JIRA's cookies are configured in the seraph-config.xml file, so you need to edit the life of the cookies there: https://confluence.atlassian.com/display/JIRA/JIRA+Cookies

You can also disable cookies by editing the file found at <JIRA_INSTALL_DIR>/atlassian-jira/includes/loginform.jsp for a more permanent solution, as described in this knowledge base article: https://confluence.atlassian.com/display/JIRA/Disabling+Remember+My+Login+on+this+Computer

Hope that helps,
John

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.