javalin-security-session/io.github.mzlnk.javalin.security.session/HttpSessionManager/Builder/rotateSessionIdOnCreate

rotateSessionIdOnCreate

fun rotateSessionIdOnCreate(enabled: Boolean): HttpSessionManager.Builder

When true (default), create rotates the session id after ensuring a session exists — session-fixation defense.