function SessionManager::regenerate

File

core/lib/Drupal/Core/Session/SessionManager.php, line 207

Class

SessionManager

Manages user sessions.

Namespace

Code

public function regenerate($destroy = FALSE, $lifetime = NULL) {
    // Nothing to do if we are not allowed to change the session.
    if ($this->isCli()) {
        return;
    }
    // We do not support the optional $destroy and $lifetime parameters as long
    // as #2238561 remains open.
    if ($destroy || isset($lifetime)) {
        throw new \InvalidArgumentException('The optional parameters $destroy and $lifetime of SessionManager::regenerate() are not supported currently');
    }
    if ($this->isStarted()) {
        $old_session_id = $this->getId();
        // Save and close the old session. Call the parent method to avoid issue
        // with session destruction due to the session being considered obsolete.
        parent::save();
        // Ensure the session is reloaded correctly.
        $this->startedLazy = TRUE;
    }
    session_id(Crypt::randomBytesBase64());
    // We set token seed immediately to avoid race condition between two
    // simultaneous requests without a seed.
    $this->getMetadataBag()
        ->setCsrfTokenSeed(Crypt::randomBytesBase64());
    if (isset($old_session_id)) {
        $params = session_get_cookie_params();
        $expire = $params['lifetime'] ? REQUEST_TIME + $params['lifetime'] : 0;
        setcookie($this->getName(), $this->getId(), $expire, $params['path'], $params['domain'], $params['secure'], $params['httponly']);
        $this->migrateStoredSession($old_session_id);
    }
    $this->startNow();
}