What's Changed
Do not create a session if no cookie was provided by @czechboy0 in #3372
Summary
When using
SessionsMiddlewareand a customAsyncSessionAuthenticatortogether, we were seeing that even in cases when no cookie is provided in the request, and no error was thrown by e.g. a guard middleware or the handler, we were still seeing aset-cookieheader in the response, whi...