I am using firefox 1.0.3 on Fedora Core 3 linux.
I just try JBoss 4.0.2 and found that after I logout using session.invalidate() and revisit my webapp without closing the web browser, jbossweb is using the old session id for the newly created session. In JBoss 4.0.1sp1, a new session id is generated for the newly created session.
Using the invalidated session id for the new session in JBoss 4.0.2 ruin my way of login. Is there any parameter to configure JBoss to generated a new session id for a new session when the web browser is not closed.
