Legacy Knowledge Base
Published Sep. 10, 2025

session.test.cookie.support portal property

Written By

Kanchan Bisht

How To articles are not official guidelines or officially supported documentation. They are community-contributed content and may not always reflect the latest updates to Liferay DXP. We welcome your feedback to improve How To articles!

While we make every effort to ensure this Knowledge Base is accurate, it may not always reflect the most recent updates or official guidelines.We appreciate your understanding and encourage you to reach out with any feedback or concerns.

Legacy Article

You are viewing an article from our legacy "FastTrack" publication program, made available for informational purposes. Articles in this program were published without a requirement for independent editing or verification and are provided"as is" without guarantee.

Before using any information from this article, independently verify its suitability for your situation and project.

Issue

  • Can we disable session.test.cookie.support in the portal-ext.properties file as it enables the user authentication process when an iframe is used?

Environment

  • Liferay DXP 

Resolution

  • This property is related to the cookie COOKIE_SUPPORT (How Cookies are Used in Liferay). Setting it to false will bypass checking whether or not the cookie is within the request.
  • The session.test.cookie.support property in Liferay DXP serves the purpose of user authentication and session management.
  • Liferay relies on cookies to maintain user sessions and store essential information. This property acts as a check to verify if the user's browser has cookies enabled.
    • By default, session.test.cookie.support is set to true. This means Liferay sends a test cookie named "COOKIE_SUPPORT" to the browser before allowing login.
    • If the browser accepts and sends the cookie back, Liferay knows cookies are functional and can proceed with authentication.
  • However, this is not recommended as it disables the check altogether. Users with disabled cookies won't be notified, potentially leading to login frustration.
  • Disabling the check should only be considered as a last resort if it is ensured that the cookies are always enabled for the users.

Additional Information

  • An iframe stands for inline frame, is essentially a window within a web page that displays content from another source. It's like having a mini-browser inside the main browser window.
    • e.x; If users want to include a YouTube video, a social media feed, or even a live chat on their website, iframes provide a way to seamlessly integrate that external content.
Did this article resolve your issue ?

Legacy Knowledge Base