click JIRA Issue Collector's Button for Issue collection in Our In-House Web Application, Our In-house Web Application's Session is Expired.

[SungJin Woo]

click JIRA Issue Collector's Button for Issue collection in Our In-House Web Application, Our In-house Web Application's Session is Expired.

See below Our Session Creation source. is it Conflict? Plz, check this.

request.setAttribute("USER_INFO", hmResult);   
 UserSessionInfoManager.setUserSessionInfo(request, response);

       ################################################################
 public static void setUserSessionInfo(HttpServletRequest request, HttpServletResponse response) throws Exception
 {
    UserSessionInfoModel userSessionInfoModel = new UserSessionInfoModel();
    String strSystemSupportLangCode = null;
    HashMap hmUserInfo = null;
            HttpSession session = request.getSession();

            try
    {
  hmUserInfo = (HashMap)request.getAttribute("USER_INFO");
   
  strSystemSupportLangCode = request.getParameter("SYSTEM_SUPPORT_LANG") == null ? (String)request.getAttribute("SYSTEM_SUPPORT_LANG") : request.getParameter("SYSTEM_SUPPORT_LANG");
  userSessionInfoModel.setSystemLangCode   (strSystemSupportLangCode);      
  userSessionInfoModel.setUserId           ((String)hmUserInfo.get("USER_ID"));    
  userSessionInfoModel.setUserName         ((String)hmUserInfo.get("USER_NAME"));
  userSessionInfoModel.setUserNameEng      ((String)hmUserInfo.get("USER_NAME_ENG"));

  userSessionInfoModel.setUserCompCode     ((String)hmUserInfo.get("COMP_CODE"));
  userSessionInfoModel.setUserCompName     ((String)hmUserInfo.get("COMP_NAME"));
  userSessionInfoModel.setUserLangCode     ((String)hmUserInfo.get("LANG_CODE"));
  userSessionInfoModel.setUserDeptCode     ((String)hmUserInfo.get("DEPT_CODE"));
  userSessionInfoModel.setUserDeptName     ((String)hmUserInfo.get("DEPT_NAME"));
  userSessionInfoModel.setUserAuthGroupCode((String)hmUserInfo.get("AUTH_GROUP_CODE"));
  userSessionInfoModel.setUserPassword     ((String)hmUserInfo.get("PASSWORD"));
  userSessionInfoModel.setUserEMailAddress ((String)hmUserInfo.get("EMAIL"));
  userSessionInfoModel.setUserCurrCode     ((String)hmUserInfo.get("CURR_CODE"));
  userSessionInfoModel.setUserRank         ((String)hmUserInfo.get("USER_RANK"));
  userSessionInfoModel.setUserBizPlace     ((String)hmUserInfo.get("BIZ_PLACE"));
  userSessionInfoModel.setUserBizArea      ((String)hmUserInfo.get("BIZ_AREA" ));

  session.setAttribute(strSessionKey, userSessionInfoModel);
  
  //request.getSession().setMaxInactiveInterval(Integer.parseInt(GlobalProperties.getGlobalProperty("he.wa.sessioninterval")));
    }
    catch(Exception e)
    {
  e.printStackTrace();
  throw e;
    }
 }

[Penny Wyatt (On Leave to July 2021) · Accepted solution]

It's a long shot, but are the two instances (JIRA and the web application) accessed by the same hostname/domain but different ports?

That is, if JIRA is running on:

http://myservername:8080

and the webapp is running on

http://myservername:8090

Since session cookies are scoped by domain and path but not port, if you have such a configuration, the two webapps will overwrite each other's session cookies when you navigate to them.