1.6 Web Start always downloads jar
I have a Web Start application that requires a jar that is within a secure area on our server. In order to retrieve the jar, the url to get that jar includes an authenticated session id. For example, the relevant element in my jnlp looks like:
<jar href="protectedArea/app.jar;sessionid=X"/>
X will change after every user login.
In JRE 1.5, this jar was downloaded and cached using the url without the session parameter (i.e. "protectedArea/app.jar"). But it appears that JRE 1.6 caches using the entire jar (i.e. "protectedArea/app.jar;sessionid=X"). Since X changes with every login, JRE 1.6 will not find previously downloaded jars in the cache, and therefore, the jar file will be downloaded after every login.
Is this a bug or was this change made on purpose? If made on purpose, why?
Thank you.
