Astro Info

Astro                    v5.1.1
Node                     v22.12.0
System                   macOS (arm64)
Package Manager          npm
Output                   static
Adapter                  @astrojs/node
Integrations             none

If this issue only occurs in one browser, which browser is a problem?

No response

Describe the Bug

Session regeneration is currently non functional - the current code deletes the #sessionID property to indicate that the existing session id is deleted:

But then it uses #ensureSessionID() to generate a new one, which doesn't check that private property, but instead checks the cookie directly:

If a session exists, this check will always succeed, leading to the session ID not changing.

I believe this is fixable by removing the call to #ensureSessionID and replacing this line:

with a direct regeneration, i.e. this.#sessionID = crypto.randomUUID();

What's the expected result?

The session id should change.

Link to Minimal Reproducible Example

https://stackblitz.com/edit/github-muwk6ati-gxwf5xkb?file=src%2Fpages%2Findex.astro

Participation

• I am willing to submit a pull request for this issue.