How to disable long-lived HTTP cookie

[Fabrice Porcher]

Hi,

Does anyone know how to disable long-lived HTTP cookie

Our internal security policy banned the use of cookies for authentification.

When the file $catalina_home/atlassian-jira/WEB-INF/classes/jira-application.properties was still in use, set

jira.option.allowcookies=false

desactivated long-lived HTTP cookie and hid checkbox

I could set

<init-param>
    <param-name>autologin.cookie.age</param-name>
    <param-value>0</param-value>
</init-param>

but checkbox will still display. And it's a little bit ugly :(

Sincerely

F.P

[JohnA · Accepted solution]

Hi Fabrice,

JIRA's cookies are configured in the seraph-config.xml file, so you need to edit the life of the cookies there: https://confluence.atlassian.com/display/JIRA/JIRA+Cookies

You can also disable cookies by editing the file found at <JIRA_INSTALL_DIR>/atlassian-jira/includes/loginform.jsp for a more permanent solution, as described in this knowledge base article: https://confluence.atlassian.com/display/JIRA/Disabling+Remember+My+Login+on+this+Computer

Hope that helps,
John