Uploaded image for project: 'OpenWebBeans'
  1. OpenWebBeans
  2. OWB-1041

Session id changes in tomcat integration are not propagated to session context manager

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 1.2.6
    • 1.5.0
    • None
    • None

    Description

      The tomcat 7 plugin doesn't handle changes of session ids. E. g. during the login phase of the container the session id changes (when session fixiation protection is not disabled). Such changes are not propagated to the session context manager, which uses the session id to identify the current session context. Hence a new session context is created.

      Attachments

        1. OWB-1041.patch
          4 kB
          Sebastian Gebhardt

        Activity

          People

            struberg Mark Struberg
            segebhar Sebastian Gebhardt
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: