November 2017
Intermediate to advanced
542 pages
14h 24m
English
The session-fixation-protection attribute has the following three options that allow you to alter its behavior, as follows:
|
Attribute value |
Description |
|
none() |
This option disables session fixation protection and (unless other sessionManagement() attributes are non-default) does not configure SessionManagementFilter. |
|
migrateSession() |
When the user is authenticated and a new session is allocated, it ensures that all attributes of the old session are moved to the new session. |
|
newSession() |
When the user is authenticated, a new session is created and no attributes from the old (unauthenticated) session will be migrated. |
In most cases, the default behavior of migrateSession() ...
Read now
Unlock full access