regenerateSession method

void regenerateSession()

Regenerates the session ID while preserving data.

Use this after login to prevent session fixation attacks.

Implementation

void regenerateSession() {
  final current = sessionOrNull;
  if (current == null) return;

  final newSession = SessionData.create(Session._defaultIdGenerator());
  for (final entry in current.data.entries) {
    newSession.set(entry.key, entry.value);
  }
  set('_session', newSession);
}