QUALITY PATCH

ACSD-58141: PHPSESSID regenerates on POST requests for a logged-in customer with the L2 Redis cache…

PHPSESSID regenerates on POST requests for a logged-in customer with the L2 Redis cache enabled. Quality patch ACSD-58141 for magento/framework applies to Magento Open Source and Adobe Commerce 2.4.4 to 2.4.7-p10.

Categories
Customer
Components
magento/framework
Origin
adobe-commerce-support
Since QPT
1.1.50

Issue

PHPSESSID regenerates on POST requests for a logged-in customer with the L2 Redis cache enabled.

Steps to reproduce

1. Create a simple product. 1. Create a customer and log in to the Storefront. 1. Check the value of PHPSESSID. 1. Send a few POST requests (For e.g., adding product to cart), and see that PHPSESSID remains the same). 1. Log in to the Admin panel and change the middle name of the customer. 1. When the middle name is saved, change it and save it again a few times. 1. On the storefront, send a POST request. PHPSESSID should have been updated. 1. On the storefront, send another POST request and check PHPSESSID. 1. Repeat the previous step a few times.

Adobe's page lists 2.4.4 - 2.4.6-p7 as compatible; the versions below are resolved from the current QPT constraints and are the ones the tool will offer.

Install

Install the Quality Patches Tool with composer require magento/quality-patches, apply the prerequisites listed for all files applicable to your distribution and version first, then run vendor/bin/magento-patches apply ACSD-58141. On Cloud, add ACSD-58141 under stage.build.QUALITY_PATCHES in .magento.env.yaml.

For cweagans/composer-patches, choose a compatible version below and download the bundle. Copy its ACSD-58141/ folder into patches/composer/, merge composer.patches.json into composer.json, then run composer install. Bundle prerequisites the same way and list them first. Paths are relative to each package root, using the default -p1 level. Prefer local files when configuring composer-patches; a remote URL can change.

Patch files and compatible versions

Packages across compatible versions (1): magento/framework
Packages across compatible versions (1): magento/framework

Sources

Łukasz Bajsarowicz
Built by

Łukasz Bajsarowicz, e-commerce architect

Magento and Adobe Commerce architecture, upgrades, performance and audits for merchants and agencies since 2015; magento.watch is the tooling I use on those projects.

Open source, maintained on weekends.