I have noticed the cookie is not being secured going through the proxy Server. Any idea how to sort this one out
Okay, found the solution (thanks to ChatGPT)
Because the proxy server talks to AwareIM on 8080 unsecured port, AwareIM does not secure the cookie.
So to resolve this, server.xml must be edited
Find the <Connector> element for port 8080, and add a remoteIpValve and the proxy attributes like so:
<Connector port="8080" protocol="HTTP/1.1"
address="127.0.0.1"
connectionTimeout="20000"
redirectPort="8443"
proxyName="yourserver.com"
proxyPort="443"
scheme="https"
secure="true" />
Optional: Add RemoteIpValve for more robust proxy header handling
Just above <Engine> in server.xml, add:
<Valve className="org.apache.catalina.valves.RemoteIpValve"
internalProxies=".*"
protocolHeader="X-Forwarded-Proto"
protocolHeaderHttpsValue="https"
portHeader="X-Forwarded-Port"
/>
This works for me