Michael Pasternak has submitted this change and it was merged. Change subject: restapi : don't set jsessionid cookie when authentication fails(#927140) ...................................................................... restapi : don't set jsessionid cookie when authentication fails(#927140) Rest APi returns session id when authentication fails and the user makes calls with "prefer: persistent-auth" Change-Id: I84907ab56e99ebb875124f42345d691edad3cdbe Bug-Url: https://bugzilla.redhat.com/927140 Signed-off-by: Ravi Nori <rnori(a)redhat.com&gt; --- M backend/manager/modules/restapi/interface/common/jaxrs/src/main/java/org/ovirt/engine/api/common/security/auth/Challenger.java M backend/manager/modules/restapi/interface/common/jaxrs/src/test/java/org/ovirt/engine/api/common/security/auth/ChallengerTest.java 2 files changed, 16 insertions(+), 11 deletions(-) Approvals: Michael Pasternak: Verified; Looks good to me, approved -- To view, visit http://gerrit.ovirt.org/13371 To unsubscribe, visit http://gerrit.ovirt.org/settings Gerrit-MessageType: merged Gerrit-Change-Id: I84907ab56e99ebb875124f42345d691edad3cdbe Gerrit-PatchSet: 4 Gerrit-Project: ovirt-engine Gerrit-Branch: master Gerrit-Owner: Ravi Nori <rnori(a)redhat.com&gt; Gerrit-Reviewer: Michael Pasternak <mpastern(a)redhat.com&gt; Gerrit-Reviewer: Oved Ourfali <oourfali(a)redhat.com&gt; Gerrit-Reviewer: Ravi Nori <rnori(a)redhat.com&gt;