-
Notifications
You must be signed in to change notification settings - Fork 1.1k
Description
Hi
I have a project that uses tomcat 8 and Java EE Security, I just added it to the spring-session-redis project, with the new spring-session changes the whole business works fine, but the login homepage that posts the form to j_security_check and then Goes from authentication to welcome-page, changes the sessionId of httprequest in this scenario, and causes the next servlet where I want the captcha information to be null. Of course, I checked with the previous config and it also changes the sessionId, but in the internal tomcat-catalania classes, exactly the AuthenticatorBase class of the register method changes the sessionId, and this causes the previous session information to be transferred to the new session, and as a result session The new one has the previous captcha information and there is no problem but in spring-session-redis this does not happen, can you help me?
Thankful