Bamboo cookies
Bamboo uses Seraph, an open source framework, for HTTP cookie authentication.
認証 cookie
Bamboo uses two cookies:
- The JSESSIONID cookie is created by the application server and used for session tracking purposes.
- The 'remember me' cookie,
seraph.bamboo, is generated by Bamboo when the user selects the Remember me checkbox on the login page.
You can read about cookies on the Wikipedia page.
このページの内容
The 'Remember Me' cookie
The 'remember me' cookie is a long-lived HTTP cookie. This cookie can be used to authenticate an unauthenticated session. Bamboo generates this cookie when the user selects the Remember me checkbox on the login page.
Cookie key and value
By default, the cookie key is seraph.bamboo. This key is defined in the BAMBOO-INSTALLATION/webapp/WEB-INF/classes/seraph-config.xml file, in the login.cookie.key parameter.
The cookie contains a unique identifier plus a securely-generated random string.
認証に cookie を利用する
When a user requests a web page, if the request is not already authenticated via session-based authentication or otherwise, Bamboo will match the 'remember me' cookie (if present) against the token stored for the user in the Bamboo database (if present).
ランダムな文字列が、データベースに格納されている値と一致し、クッキーの有効期限が切れていない場合は、ユーザーは認証されます。
Life of 'Remember Me' cookies
cookie には有効期限を設定できます。これを行うには、BAMBOO-INSTALLATION/webapp/WEB-INF/classes/seraph-config.xmlinit-param 要素の下に次の行を挿入します。
<init-param>
<param-name>autologin.cookie.age</param-name>
<param-value>2592000</param-value><!-- 30 days in seconds -->
</init-param>
Other cookie usage
There are several cookies in Bamboo that are used for storing basic presentation states, such as the number of log lines to show, which tab was previously selected etc. They are:
| Cookie | 目的 |
AJS.conglomerate.cookie | Track which general tabs are open and closed |
BAMBOO-AGENT-FILTER | Date range to show the builds for agents |
BAMBOO-BUILD-FILTER | Date range to show the builds |
BAMBOO-LOG-REFRESH | Log refresh interval in seconds |
BAMBOO-MAX-DISPLAY-LINES | Maximum # of lines to show on the live logs page |
atlassian.bamboo.dashboard.tab.selected | Which tab is selected on the dashboard |
bamboo.author.view | Which tab is selected on the Authors tab |
bamboo.build.groupby.type | Which time group-by period is used in the reports |
bamboo.dash.display.toggle | The ids of the projects that are expanded on the dashboard |