Session become empty when using sinatra app

[arunagw]

Found something which needs to be looked.

Example: A sinatra app with having :session, true as a configuration.

this will reset session as {} and an error raised on our callback_phase method where we are checking raise OmniAuth::NoSessionError.new("Session Expired") if session['oauth'].nil?

Any idea??

Without session config in sinatra it contains

{"oauth"=>{"twitter"=>{"callback_confirmed"=>true, "request_token"=>"some token", "request_secret"=>"some secret"}}}

related issue here https://github.com/arunagw/omniauth-twitter/issues/42

[mftaher]

is there any update on this issue? I'm unable to connect to twitter second time when I logout; unless restarting the server, doesn't make any sense ...

[danlo]

+1 ran into this problem; but for linked in.

[hcai]

@danlo have you figured out for linkedin yet?

[danlo]

@hcai I wasn't able to figure it out; and it still plauges me. I think that devise (and I can't find where) does a reset_session. (I grep'd the code). I want to avoid the session fixation attack; so I'm thinking about rolling my own session just to by-pass the session_id changing.

[BobbyMcWho]

Closing as stale