Spring Secure JSESSIONID boot flag not set via HTTPS

Question

We created the Cloud Foundry app using Liberty for Java. When testing the application, we found that the SSL cookie does not have a flag set.

Question: JSESSIONID did not set the Secure flag, and _VCAP_ID set the security flag

We used Spring Boot to develop the application, and according to the documentation, we just need to protect the cookie flag in the properties file: http://docs.spring.io/spring-boot/docs/current/reference/html/common-application-properties .html

SOLUTION: We decided to fix this problem by completing this post. Add a secure flag to the JSESSIONID cookie in Spring automatically

Does anyone know if there is a problem with Cloud Foundry or Liberty related to the inability to set a secure SSL cookie flag on both JSESSIONID and _VCAP_ID at the same time as HTTPS?