Authentication token in session triggers replication of session each request ---------------------------------------------------------------------------- Key: WFLY-5032 URL: https://issues.jboss.org/browse/WFLY-5032 Project: WildFly Issue Type: Bug Components: Clustering Affects Versions: 10.0.0.Alpha6 Reporter: Paul Ferraro Assignee: Paul Ferraro Fix For: 10.0.0.Beta1 If an authentication token exists in the web session, and the user is using FORM or a custom authentication mechanism, then that token is read from the session each request. The token is treated as a mutable object by the clustering code and triggers replication of the session on each request. Annotating this with @Immutable will fix the problem.