You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@wicket.apache.org by ad...@apache.org on 2026/04/10 11:20:20 UTC
(wicket) branch wicket-9.x updated: Changing session id after binding.
This is an automated email from the ASF dual-hosted git repository.
adelbene pushed a commit to branch wicket-9.x
in repository https://gitbox.apache.org/repos/asf/wicket.git
The following commit(s) were added to refs/heads/wicket-9.x by this push:
new 008b1a5c59 Changing session id after binding.
008b1a5c59 is described below
commit 008b1a5c596a58ecb742a12b1713754029f5d601
Author: Andrea Del Bene <ad...@apache.org>
AuthorDate: Sun Mar 29 22:00:15 2026 +0200
Changing session id after binding.
---
.../apache/wicket/authroles/authentication/AuthenticatedWebSession.java | 1 +
1 file changed, 1 insertion(+)
diff --git a/wicket-auth-roles/src/main/java/org/apache/wicket/authroles/authentication/AuthenticatedWebSession.java b/wicket-auth-roles/src/main/java/org/apache/wicket/authroles/authentication/AuthenticatedWebSession.java
index 8cd97c0dfa..5438cfba95 100644
--- a/wicket-auth-roles/src/main/java/org/apache/wicket/authroles/authentication/AuthenticatedWebSession.java
+++ b/wicket-auth-roles/src/main/java/org/apache/wicket/authroles/authentication/AuthenticatedWebSession.java
@@ -71,6 +71,7 @@ public abstract class AuthenticatedWebSession extends AbstractAuthenticatedWebSe
}
else if (authenticated && signedIn.compareAndSet(false, true))
{
+ changeSessionId();
bind();
}
return authenticated;