diff --git a/src/Bridges/SecurityHttp/SessionStorage.php b/src/Bridges/SecurityHttp/SessionStorage.php index 0f904d26..2c27fc67 100644 --- a/src/Bridges/SecurityHttp/SessionStorage.php +++ b/src/Bridges/SecurityHttp/SessionStorage.php @@ -57,6 +57,9 @@ public function clearAuthentication(bool $clearIdentity): void $section->authenticated = false; $section->reason = self::LOGOUT_MANUAL; $section->authTime = null; + if ($clearIdentity === true) { + $section->identity = null; + } // Session Fixation defence $this->sessionHandler->regenerateId();