George K

Sometimes, there is the need to refresh the session ID **without** loosing the session data. Examples: 1. Refreshing session ID after authentication (to protect against session fixation attacks) https://www.owasp.org/index.php/Session_fixation https://github.com/jaredhanson/passport/issues/192...