Custom Session ID generation in Jboss 5

Question

Is there a way to use custom session ID generator in Jboss 5?

The reason I need this: my company application needs to pass penetration test and for that it needs to have session IDs, which "are 128 bit in length and comprised of random values".

score 0 · Answer 1 · answered Jun 19 '13 at 14:34

0

JBoss 5 satisfies that requirement out of the box: SessionIDGenerator.java.

answered Jun 19 '13 at 14:34

Ryan Goltry

106
5

Custom Session ID generation in Jboss 5

1 Answers1