Re: Replace session after user login

2018-04-24 Thread Tom Götz
Thank you Sven for that clarification! Cheers, Tom > On 24.04.2018, at 09:06, Sven Meier wrote: > > Hi, > > replaceSession's javadoc says "replaces the underlying session". That matches > your observation. > > You have to call invalidatNow(). Note that this doesn't prevent the session >

Re: Replace session after user login

2018-04-24 Thread Sven Meier
Hi, replaceSession's javadoc says "replaces the underlying session". That matches your observation. You have to call invalidatNow(). Note that this doesn't prevent the session object from surviving, since it is still bound to the current thread. For that you have to call ThreadContext#setSessi