title: Is it possible to renew sessions in ASP.NET Core?
body: <p>In order to prevent sessions fixation attacks I would like to generate a new session ID after a user has authenticated themselves.
  So far I have not found any way to do this with <a href="https://docs.microsoft.com/en-us/aspnet/core/fundamentals/app-state?view=aspnetcore-3.0" rel="nofollow noreferrer">Microsoft.AspNetCore.Session v2.2.0</a>. As far as I can tell, the non-Core version doesn't support this either.</p>
  
  <p>Is there an API or method that I have missed?</p>
  
  <p>Pointers to other middlewares with these features are also appreciated.</p>