play framework secure config

Question

When I set application.session.secure=true in application.conf I can't store anything in the session. Can anyone tell me how this is supposed to work?

Answer 1

session.secure=true only tells the client to send the cookie only over https (not over http).

Remember that Play! is a stateless framework. Nothing should be kept in the session. If you need to store things, use the cookie.