called when the session has been changed and the old attributes have been migrated to the new session . only called if a session existed to start with . allows subclasses to plug in additional behaviour . the default implementation of this method publishes a sessionfixationprotectionevent to notify the application that the sessionid has changed . if you override this method and still wish these events to be published , you should call super.onsessionchange within your overridingmethod . concode_field_sep Log logger concode_elem_sep boolean alwaysCreateSession concode_elem_sep ApplicationEventPublisher applicationEventPublisher concode_field_sep void setApplicationEventPublisher concode_elem_sep HttpSession applySessionFixation concode_elem_sep void onAuthentication concode_elem_sep void publishEvent concode_elem_sep void publishEvent concode_elem_sep void setAlwaysCreateSession
void function ( String arg0 , HttpSession arg1 , Authentication arg2 ) { applicationEventPublisher . publishEvent ( new SessionFixationProtectionEvent ( arg2 , arg0 , arg1 . getId ( ) ) ) ; }