[ 
https://issues.apache.org/jira/browse/OWB-1041?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Mark Struberg resolved OWB-1041.
--------------------------------
       Resolution: Fixed
    Fix Version/s: 1.5.0
         Assignee: Mark Struberg

> Session id changes in tomcat integration are not propagated to session 
> context manager
> --------------------------------------------------------------------------------------
>
>                 Key: OWB-1041
>                 URL: https://issues.apache.org/jira/browse/OWB-1041
>             Project: OpenWebBeans
>          Issue Type: Bug
>    Affects Versions: 1.2.6
>            Reporter: Sebastian Gebhardt
>            Assignee: Mark Struberg
>             Fix For: 1.5.0
>
>         Attachments: OWB-1041.patch
>
>
> The tomcat 7 plugin doesn't handle changes of session ids. E. g. during the 
> login phase of the container the session id changes (when session fixiation 
> protection is not disabled). Such changes are not propagated to the session 
> context manager, which uses the session id to identify the current session 
> context. Hence a new session context is created.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to