[
https://issues.apache.org/jira/browse/WICKET-5164?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sven Meier resolved WICKET-5164.
--------------------------------
Resolution: Fixed
Fix Version/s: 6.10.0
7.0.0
PageStoreManger.SessionEntry now implements HttpSessionBindingListener to pass
the correct identifier to the PageStore.
This breaks somewhat the abstraction of IPageManagerContext :(. But I didn't
find another solution to access the initial sessionId which is used for all
access to PageStore.
> PageStoreManager.SessionEntry keeps outdated sessionId when container changes
> sessionId
> ---------------------------------------------------------------------------------------
>
> Key: WICKET-5164
> URL: https://issues.apache.org/jira/browse/WICKET-5164
> Project: Wicket
> Issue Type: Bug
> Components: wicket
> Affects Versions: 6.7.0, 7.0.0
> Reporter: Sven Meier
> Assignee: Sven Meier
> Fix For: 7.0.0, 6.10.0
>
>
> PageStoreManager keeps the initial sessionId for each SessionEntry.
> If the container changes the sessionId later (e.g. Tomcat's "Session Fixation
> Protection"), all pages continue to be stored under the the initial
> sessionId. This is necessary to be able to access old pages even after a
> change to the sessionId.
> However PageStoreManager#sessionExpired(String) passes the *current*
> sessionId to the PageStore. If it is not longer equal the original sessionId,
> the PageStore will fail to remove the stored pages for the session.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
