Disable Apache client5 cookie manager by default about spring-cloud-gateway HOT 4 OPEN

/** GatewayServerMvcAutoConfiguration.gatewayClientHttpRequestFactory */
    @Bean
    public ClientHttpRequestFactory gatewayClientHttpRequestFactory(GatewayMvcProperties gatewayMvcProperties,
                                                                    SslBundles sslBundles) {
        GatewayMvcProperties.HttpClient properties = gatewayMvcProperties.getHttpClient();

        SslBundle sslBundle = null;
        if (org.springframework.util.StringUtils.hasText(properties.getSslBundle())) {
            sslBundle = sslBundles.getBundle(properties.getSslBundle());
        }
        ClientHttpRequestFactorySettings settings = new ClientHttpRequestFactorySettings(properties.getConnectTimeout(),
                properties.getReadTimeout(), sslBundle);

        ClientHttpRequestFactory chrf;
        if (properties.getType() == GatewayMvcProperties.HttpClientType.JDK) {
            // TODO: customize restricted headers
            String restrictedHeaders = System.getProperty("jdk.httpclient.allowRestrictedHeaders");
            if (!org.springframework.util.StringUtils.hasText(restrictedHeaders)) {
                System.setProperty("jdk.httpclient.allowRestrictedHeaders", "host");
            }
            else if (org.springframework.util.StringUtils.hasText(restrictedHeaders) && !restrictedHeaders.contains("host")) {
                System.setProperty("jdk.httpclient.allowRestrictedHeaders", restrictedHeaders + ",host");
            }

            chrf = ClientHttpRequestFactories.get(JdkClientHttpRequestFactory.class, settings);
        } else {
            chrf = ClientHttpRequestFactories.get(settings);
        }

        log.error("chrf : {}", chrf);
        if (chrf instanceof HttpComponentsClientHttpRequestFactory hcchrf) {
            log.error("hcchrf.getHttpClient() : {}", hcchrf.getHttpClient());
        } else if (chrf instanceof JdkClientHttpRequestFactory jchrf) {
            try {
                Field field = jchrf.getClass().getDeclaredField("httpClient");
                field.setAccessible(true);
                Object httpClient = field.get(jchrf);
                log.error("jchrf.getHttpClient() : {}", httpClient);
            } catch (Exception e) {
                log.error("", e);
            }
        }

       if (chrf instanceof HttpComponentsClientHttpRequestFactory hcchrf) {
            hcchrf.setHttpClient(createHttpClient(settings.readTimeout(), settings.sslBundle()));
        }

        return chrf;
    }

    private static HttpClient createHttpClient(Duration readTimeout, SslBundle sslBundle) {
        PoolingHttpClientConnectionManagerBuilder connectionManagerBuilder = PoolingHttpClientConnectionManagerBuilder
                .create();
        if (readTimeout != null) {
            SocketConfig socketConfig = SocketConfig.custom()
                    .setSoTimeout((int) readTimeout.toMillis(), TimeUnit.MILLISECONDS)
                    .build();
            connectionManagerBuilder.setDefaultSocketConfig(socketConfig);
        }
        if (sslBundle != null) {
            SslOptions options = sslBundle.getOptions();
            SSLConnectionSocketFactory socketFactory = new SSLConnectionSocketFactory(sslBundle.createSslContext(),
                    options.getEnabledProtocols(), options.getCiphers(), new DefaultHostnameVerifier());
            connectionManagerBuilder.setSSLSocketFactory(socketFactory);
        }
        PoolingHttpClientConnectionManager connectionManager = connectionManagerBuilder.useSystemProperties()
                .build();
       // We disabled the cookie management here
        return HttpClientBuilder.create().useSystemProperties().disableCookieManagement().setConnectionManager(connectionManager).build();
    }