On Mon, 2012-01-30 at 17:00 +1100, Greg Wilkins wrote:
>
> I agree that adding a method to allow the application to provoke a
> session ID change is a good addition.
> However, I question why this is on the Request API? Surely it would
> be better on the HttpSession itself?
It is on the request object since the session cookie must be changed
too.
--
Remy Maucherat <rmaucher_at_redhat.com>
Red Hat Inc