Hi, does anyone know how to set this on nginx:
The cookies:
Set-Cookie: JSESSIONID=***replaced***; Path=/; HttpOnly
are missing the "secure" attribute.
Thank you Michal.
To be honest, why don't you set it in the web.xml so your servlet container will handle that.
You can find it in the WEB-INF directory of the war file.