Regenerate session id
Open
enhancement
- Dominant language
- Kotlin
- Stars
- 14.5k
- Forks
- 1.3k
- Avg merge
- 2d 13h
- Merged PRs (30d)
- 49
Description
### Ktor Version
1.1.2
### Ktor Engine Used(client or server and name)
any server
### JVM Version, Operating System and Relevant Context
JDK 11
### Feedback
Being able to regenerate session ids, to help prevent session fixation attacks.
Contributor guide
Research direction
The issue names no files, tests, or entry points. Start by locating Ktor's server session handling and determine how session identifiers can be regenerated; done means an explicit regeneration capability is available for any server engine and addresses session fixation concerns.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kotlin
- Domain
- backend, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100