void function ( String arg0 , HttpSession arg1 , Authentication arg2 ) { applicationEventPublisher . publishEvent ( new SessionFixationProtectionEvent ( arg2 , arg0 , arg1 . getId ( ) ) ) ; }
called when the session has been changed and the old attributes have been migrated to the new session . only called if a session existed to start with . allows subclasses to plug in additional behaviour . the default implementation of this method publishes a sessionfixationprotectionevent to notifythe application that the session id has changed . if you override this method and still wish these events to be published , you should call super.onsessionchange within your overriding method . concode_field_sep Log logger concode_elem_sep boolean alwaysCreateSession concode_elem_sep ApplicationEventPublisher applicationEventPublisher concode_field_sep void setApplicationEventPublisher concode_elem_sep HttpSession applySessionFixation concode_elem_sep void onAuthentication concode_elem_sep void publishEvent concode_elem_sep void setAlwaysCreateSession