Missing security attributes in ARD HUB UI cookies.

Products

• CA Agile Requirements Designer

Issue/Introduction

Identified below issue cookie related in PEN testing of ARD HUB:

Environment

ARD 3.4

Resolution

For cookies, add line below in the keycloak.conf file and restart Keycloak service.

# Do not attach route to cookies and rely on the session affinity capabilities from reverse proxy
spi-sticky-session-encoder-infinispan-should-attach-route=false