The transient keyword was removed from the SessionAuthentication class private data member Session session. This leads to problems because the SessionAuthentication itself is stored in the session during some forms of authentication, such as form or openid. Thus, if the session needs to be passivated, there is a backpointer to itself.
Closes #12309
The
transientkeyword was removed from theSessionAuthenticationclass private data memberSession session. This leads to problems because theSessionAuthenticationitself is stored in thesessionduring some forms of authentication, such as form or openid. Thus, if thesessionneeds to be passivated, there is a backpointer to itself.