Closed mattwigway closed 8 years ago
I think this is due to the changes in ca55a2c561122c2e84d704bae34b4d0ff94a0f58 to prevent session fixation - no session is created after logout. I think we just need to call req.session(true) before calling req.raw().changeSessionId().
req.session(true)
req.raw().changeSessionId()
confirmed fixed in b8459b58d09fcd1c65db52b0a7e095963749a7ae
I think this is due to the changes in ca55a2c561122c2e84d704bae34b4d0ff94a0f58 to prevent session fixation - no session is created after logout. I think we just need to call
req.session(true)
before callingreq.raw().changeSessionId()
.