Currently the session cookie is never set on the request object. In a normal webserver setup this is not needed as a session is in php-fpm or apache fastcgi written by php itself when the response is outputted in:

When use a runner like Roadrunner the session cookie is never set on the Request object, as this kind of appserver never really outputs something and is running in the cli context.

Actually there is no way from outside to know if $session->save() was called or not because when the code in Roadrunner executes the session is actually written and so closed here:

The best way so to fix this issue is that in CLI context symfony writes the session cookie on the Response object when the session is really saved.

This fixes issues which we have in the current roadrunner implementation of php runtime:

• https://github.com/php-runtime/roadrunner-symfony-nyholm/blob/58665237ef2bff08a1ebf269e64abbf8cd09fbd7/src/Runner.php#L89
• https://github.com/php-runtime/roadrunner-symfony-nyholm/blob/58665237ef2bff08a1ebf269e64abbf8cd09fbd7/src/Runner.php#L81

Beside Roadrunner there is also Swoole implementation which would require the same here: php-runtime/runtime#60

With this changes the Runners can be simplified a lot: https://github.com/php-runtime/runtime/pull/62/files#

TODO

Reset session variables after successfully response. The following code currently lives also in the runtime implementation but is requires also by all runners and so we should find a place where we put it:

                if (PHP_SESSION_ACTIVE === session_status()) {
                    session_abort();
                }
                // reset all session variables to initialize state
                $_SESSION = [];
session_id(''); // in this case session_start() will generate us a new session_id()

EDIT: Added this now to the AbstractSessionListener service via ResetInterface.