spring-security-config/org.springframework.security.config.annotation.web.session/SessionFixationDsl

SessionFixationDsl

class SessionFixationDsl

A Kotlin DSL to configure session fixation protection using idiomatic Kotlin code.

Author

Eleftheria Stein

Since

5.3

Constructors

SessionFixationDsl

constructor()

Functions

changeSessionId

fun changeSessionId()

Specifies that the Servlet container-provided session fixation protection should be used. When a session authenticates, the Servlet method HttpServletRequest.changeSessionId is called to change the session ID and retain all session attributes.

migrateSession

fun migrateSession()

Specifies that a new session should be created and the session attributes from the original HttpSession should be retained.

newSession

fun newSession()

Specifies that a new session should be created, but the session attributes from the original HttpSession should not be retained.

none

fun none()

Specifies that no session fixation protection should be enabled.