| Subject: | Session is cleared before finalize_cookies is called, so new invalid session is created |
This is really 0.14, and not sure it's a "bug", but upgrading broke
existing code.
I had existing code that accessed the session in a finalize_cookies
method(something in the session needs to alter the behavior of the cookie).
But, in C::P::Session finalize() calls finalize_session() before calling
NEXT::finalize. So, when my finalize_cookies read the session a *new*
session id is created and that's the id that is sent in the cookie.
The problem, of course, is my session data is under a different session id.
The solution seems to be to reverse the order of those calls.
Here's how to duplicate the problem:
http://lists.scsys.co.uk/pipermail/catalyst/2007-May/013837.html
And here's the suggested fix:
http://lists.scsys.co.uk/pipermail/catalyst/2007-May/013850.html