Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make CookieSpecs/STANDARD the default cookie spec #556

Open
wants to merge 1 commit into
base: 3.x
Choose a base branch
from

Conversation

ska2342
Copy link

@ska2342 ska2342 commented Sep 1, 2020

Reasoning

The Apache HTTP Client documentation has this to say about the DEFAULT
cookie spec:

"This policy will be deprecated in favor of the standard (RFC 6265
compliant) implementation in the next minor release of HttpClient."
(https://hc.apache.org/httpcomponents-client-ga/tutorial/html/statemgmt.html)

The same document then states: "It is strongly recommended to use
either Standard or Standard strict policy in new applications."

This change makes CookieSpecs/STANDARD the default for the
get-cookie-policy multimethod.

Reasoning
---------
The Apache HTTP Client documentation has this to say about the DEFAULT
cookie spec:

"This policy will be deprecated in favor of the standard (RFC 6265
compliant) implementation in the next minor release of HttpClient."
(https://hc.apache.org/httpcomponents-client-ga/tutorial/html/statemgmt.html)

The same document then states: "It is strongly recommended to use
either Standard or Standard strict policy in new applications."

This change makes CookieSpecs/STANDARD the default for the
get-cookie-policy multimethod.
@ska2342
Copy link
Author

ska2342 commented Sep 1, 2020

Tests run through, but I think there are no tests for the cookie spec. I don't feel confident enough to write one myself.

@rymndhng
Copy link
Collaborator

Based on what I've read from the upstream documentation, I think this would apply to the minor version 4.6.x. As far as I can see, there are no plans in the upstream project to release 4.6.x.

For versions 3.x, I think it's best to retain the existing behaviour to match up.

However, if/when 4.x version is released, the default cookie behaviour should be adjusted to match the upstream default.

@rymndhng rymndhng added the 4.x label Sep 15, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants