Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

WebSessionSecurityContextRepository changes session id

Browse Source 
Fixes: gh-4842
This commit is contained in:
Rob Winch
2017-11-16 13:08:54 -06:00
parent b19e14330f
commit b7529be3d0
2 changed files with 68 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
web/src/main/java/org/springframework/security/web/server/context/WebSessionServerSecurityContextRepository.java
View File

@@ -38,7 +38,7 @@ public class WebSessionServerSecurityContextRepository
session.getAttributes().put(SESSION_ATTR, context);
}
})
.then();
.flatMap(session -> session.changeSessionId());
}
public Mono<SecurityContext> load(ServerWebExchange exchange) {