Breaking: #93002 - Support for session transfer via FE_SESSION_KEY removed 

See forge#93002

Description 

TYPO3s Frontend Session Handling has had a custom feature by setting a custom GET variable called FE_SESSION_KEY to inject an existing session into a Frontend Request without having a cookie sent as response.

This seldom used feature, which was limited to Frontend sessions only, and required knowledge of third-party integrations for TYPO3s encryption key to create such a session key is removed.

Features for integrating sessions should instead be built with custom AuthenticationServices, e.g. for Single-Sign-On functionality.

Impact 

Calling TYPO3s Frontend with FE_SESSION_KEY as GET parameter has no effect anymore and will not pick up an existing session.

Affected Installations 

TYPO3 installations using this FE_SESSION_KEY which is very rare and unlikely to be used.

Migration 

Build a custom Authentication Service to log in and use user session instead in a third-party extension.