LDEV-4400, LDEV-3315 Toggle session ID change for each LAMS module WildFly 10 changes session ID after authentication by default in order to prevent session fixation attack. It breaks TestHarness, though. In order to run TH, session ID change needs to be turned off. Turning it off for Central is not enough as a request to any other module, like Tool, triggers session ID change. In this case we need to have session ID change turned on or off in each LAMS module, not just Central.
Loading ...