Skip to content

Conversation

valorin
Copy link
Contributor

@valorin valorin commented Sep 29, 2025

Regenerates session and CSRF token on user registration.

@taylorotwell
Copy link
Member

One thing to consider is Fortify is headless and may be used by something that doesn't use Laravel sessions normally? Or from an API that doesn't have sessions?

@valorin
Copy link
Contributor Author

valorin commented Sep 29, 2025

Ah good point, I've copied the logic from PrepareAuthenticatedSession, which checks if the session exists first.

@taylorotwell taylorotwell merged commit 67116b1 into laravel:1.x Sep 30, 2025
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants