Null InvalidCookieException

[Jeremiah Garmatter]

After upgrading to CAS 6.3.2 with embedded tomcat server in a HA deployment with a mongodb shared ticket registry, I see hundreds of warnings a day about invalid cookie exceptions:

WARN [org.apereo.cas.web.support.gen.CookieRetrievingCookieGenerator] - <InvalidCookieException>

org.apereo.cas.web.support.InvalidCookieException: null

Checking the log from yesterday (logs rotated daily) revealed about 1000 Invalid cookie exceptions.

I'm not familiar with CAS under the hood, does anyone have insight on this warning?

[Jeremiah Garmatter]

Turns out there was a patch for this error: https://github.com/apereo/cas/pull/5102 in CAS 6.3.3

Patch may be a strong word though, it seems that nobody knew why null was passed to the InvalidCookieException, so they lowered the logging level to debug.