JwtSessionStore does not populate session ID on POST request following GET request

[coreagile]

We have written an integration test to prove that session data gets persisted across multiple requests. However, we are finding that when using the JwtSessionStore, when we pass the session JWT from a GET request over to a subsequent POST request, the response does not contain the appropriate session header.

However, when we use the MemorySessionStore, it does.

Is this expected behavior?

Are clients expected to keep track of the session between requests themselves for the JWT store? Or do we have a defect?

[jknack]

Yes, this is likely expected behavior. Clients are expected to keep track of the JWT between requests.

The difference you are seeing comes down to how frameworks handle stateful versus stateless session management.