package com.genersoft.iot.vmp.conf.security; import org.springframework.boot.web.servlet.support.SpringBootServletInitializer; import javax.servlet.ServletContext; import javax.servlet.ServletException; import javax.servlet.SessionCookieConfig; import javax.servlet.SessionTrackingMode; import java.util.Collections; public class UrlTokenHandler extends SpringBootServletInitializer { @Override public void onStartup(ServletContext servletContext) throws ServletException { super.onStartup(servletContext); servletContext.setSessionTrackingModes( Collections.singleton(SessionTrackingMode.COOKIE) ); SessionCookieConfig sessionCookieConfig = servletContext.getSessionCookieConfig(); sessionCookieConfig.setHttpOnly(true); } }