Uploaded image for project: 'Lucee Development'
  1. LDEV-776

SessionRotate() 'destroys' session for j2ee based sessions

    Details

    • Type: Bug
    • Status: Deployed
    • Priority: New
    • Resolution: Fixed
    • Affects Version/s: 4.5.3.007
    • Fix Version/s: 5.1.1.40
    • Labels:
      None

      Description

      While not 100% that this is a bug - the documetnation should at least be amended. Pete Freitag asserts that it is designed behaviour for ACF SessionRotate() not to work with j2ee based sessions: http://www.petefreitag.com/item/829.cfm

      That said, a simple use case to reproduce the problem:

      Application.cfc
      component {
          this.sessionManagement = true;
          this.sessionType       = "j2ee";
      
          function onRequest() {
              session.test = "something";
              dump( session.test ?: "" ); // outputs 'something'
      
              SessionRotate();
              dump( session.test ?: "" ); // outputs ''
          }
      }
      

      The same code, but with "cfml" sessions works as expected:

      Application.cfc
      component {
          this.sessionManagement = true;
          this.sessionType       = "cfml";
      
          function onRequest() {
              session.test = "something";
              dump( session.test ?: "" ); // outputs 'something'
      
              SessionRotate();
              dump( session.test ?: "" ); // outputs 'something'
          }
      }
      

        Attachments

          Issue links

            Activity

              People

              • Assignee:
                michaeloffner Michael Offner
                Reporter:
                dom_watson dom_watson
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: