cookie

cookie.md

This request has wrong password, but is still accepted by 'spring boot server' due to a presence of a cookie from another successful request:

curl --location --request POST 'http://localhost:8080/idpass' \
--header 'Authorization: Basic dXNlcjpwYXNzd29yZDEyMw==' \
--header 'Content-Type: application/json' \
--header 'Cookie: JSESSIONID=EA39A09B47575D192845148AFFCAD85B' \
--data-raw '{
    "surname":"Murdock",
    "givenname":"John",
    "placeofbirth":"Slovenia",
    "pin":"1234"
}'

This seems only true for form-based authentication but not for basic auth