Hello,
After each request I need to check and recreate a token to validate the user in order to avoid cookie stealers (two tokens, one created by me and the authKey recreated). The event EVENT_BEFORE_REQUEST solves my problem, but…
Where is the code that checks the validation of autologin? I think it would be better to put this code there.
Thanks!