wardencommunity/rails_warden

Does warden_rails clears the session after authenticating?

agis opened this issue · 1 comments

agis commented

I've noticed that when a user is authenticated, his session_id is reset.

Is this expected behavior?

hassox commented

Yes this is a feature of rails sessions that are intended to make it difficult to attack