Skip to content

[C++] Arrow Flight SQL ODBC driver has a cookie duplication bug #48966

@jmao-denver

Description

@jmao-denver

Describe the bug, including details regarding any error messages, version, and platform.

Duplicate header cookie fields and duplicate cookies are found in Flight SQL requests against a Flight SQL server with cookie authentication enabled. Below is a captured io.grpc.Metadata instance in a Flight SQL client request to the Deephaven Flight SQL server (https://github.com/deephaven/deephaven-core). The Deephaven Flight SQL server automatically refreshes the auth cookie at an interval in order to keep the session alive, and this behavior exposes the bug in the flight client layer and the ODBC layer.

Metadata(
content-type=application/grpc,
te=trailers,
grpc-accept-encoding=identity, deflate, gzip,
grpc-timeout=30100m,
user-agent=grpc-c++/1.71.0 grpc-c/46.0.0 (windows; chttp2),
auth-token-bin=,
authorization=Bearer io.deephaven.authentication.psk.PskAuthenticationHandler deephaven,
cookie=deephaven-auth-cookie=97f118fb-32d3-4e60-8a9e-4287db236ffe;
deephaven-auth-cookie=c78e7a82-fd0c-4a51-b224-51950467e2d3;
deephaven-auth-cookie=c78e7a82-fd0c-4a51-b224-51950467e2d3,
cookie=deephaven-auth-cookie=97f118fb-32d3-4e60-8a9e-4287db236ffe;
deephaven-auth-cookie=c78e7a82-fd0c-4a51-b224-51950467e2d3;
deephaven-auth-cookie=c78e7a82-fd0c-4a51-b224-51950467e2d3,
x-deephaven-auth-cookie-request=true
)

Component(s)

C++

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions