Clone
Marcin Cieslak
committed
on 14 Oct 17
LDEV-4400, LDEV-3315 Toggle session ID change for each LAMS module
WildFly 10 changes session ID after authentication by default in order
to… Show more
LDEV-4400, LDEV-3315 Toggle session ID change for each LAMS module

WildFly 10 changes session ID after authentication by default in order

to prevent session fixation attack. It breaks TestHarness, though. In

order to run TH, session ID change needs to be turned off.

Turning it off for Central is not enough as a request to any other

module, like Tool, triggers session ID change. In this case we need to

have session ID change turned on or off in each LAMS module, not just

Central. Show less