[jetty-dev] [jira] (JETTY-1529) Superfluous re-authenticate changes session ID uncoditionally on second request

Michael Pujos
edited a comment on JETTY-1529

Superfluous re-authenticate changes session ID uncoditionally on second request

@Jan Bartel

I use a servlet from gwt-comet that requires SessionHandler.setSessionRenewedOnAuthentication(false) to work, when authentication is enabled. Otherwise it is confused by the new HttpSession created by renewSessionOnAuthentication().

Can you explain the implication of setting SessionHandler.setSessionRenewedOnAuthentication(false) on security ?

Is it a good idea to setting it to false ?

This message is automatically generated by JIRA.

If you think it was sent incorrectly, please contact your JIRA administrators .

For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe from this list, please visit:

http://xircles.codehaus.org/manage_email