GUACAMOLE-549: Do not automatically create HttpSession. If an extension truly needs an HttpSession, it should create it manually via the HttpServletRequest.

This commit is contained in:
Michael Jumper
2018-04-25 00:45:50 -07:00
parent c81cb78684
commit 320d342899
2 changed files with 2 additions and 2 deletions

View File

@@ -121,7 +121,7 @@ public class TokenRESTService {
credentials.setUsername(username);
credentials.setPassword(password);
credentials.setRequest(request);
credentials.setSession(request.getSession(true));
credentials.setSession(request.getSession(false));
credentials.setRemoteAddress(request.getRemoteAddr());
credentials.setRemoteHostname(request.getRemoteHost());

View File

@@ -158,7 +158,7 @@ public class UserResource
credentials.setUsername(user.getIdentifier());
credentials.setPassword(userPasswordUpdate.getOldPassword());
credentials.setRequest(request);
credentials.setSession(request.getSession(true));
credentials.setSession(request.getSession(false));
credentials.setRemoteAddress(request.getRemoteAddr());
credentials.setRemoteHostname(request.getRemoteHost());