Class SessionFixationProtectionEvent

java.lang.Object
java.util.EventObject
org.springframework.context.ApplicationEvent
org.springframework.security.authentication.event.AbstractAuthenticationEvent
org.springframework.security.web.authentication.session.SessionFixationProtectionEvent
All Implemented Interfaces:
Serializable

public class SessionFixationProtectionEvent extends AbstractAuthenticationEvent
Indicates a session ID was changed for the purposes of session fixation protection.
Since:
3.2
See Also:
  • Constructor Details

    • SessionFixationProtectionEvent

      public SessionFixationProtectionEvent(Authentication authentication, String oldSessionId, String newSessionId)
      Constructs a new session fixation protection event.
      Parameters:
      authentication - The authentication object
      oldSessionId - The old session ID before it was changed
      newSessionId - The new session ID after it was changed
  • Method Details

    • getOldSessionId

      public String getOldSessionId()
      Getter for the session ID before it was changed.
      Returns:
      the old session ID.
    • getNewSessionId

      public String getNewSessionId()
      Getter for the session ID after it was changed.
      Returns:
      the new session ID.