-
Notifications
You must be signed in to change notification settings - Fork 99
Open
Description
Noticed we are using request.getRequestedSessionId()
as the context identifier in [1]? Is this the expected one? We usually use sessionDataKey as in [2] as the context identifier or in the case of OAuth we use the 'state' parameter.
[1]
Lines 329 to 331 in 7dfdd77
public String getContextIdentifier(HttpServletRequest request) { | |
return request.getRequestedSessionId(); | |
} |
Metadata
Metadata
Assignees
Labels
No labels