It's supposed to send a javax.servlet.http.HttpSession but it now sends a jakarta.servlet.http.HttpSession, so any listener which uses this event is now broken (this is for example the case of the listener in charge of cleaning up cached session in the OIDC extension). |