Symfony version(s) affected

5.4

Description

Similar as in #13668, I have a small AP and I need to maintain a session without using cookies. In my case, the client passes the session ID in a custom HTTP header.

The PR #15123 added support for this use case. But despite the setting use_cookies: false, Symfony sets a PHP session cookie. This seems to be the case at least since commit b3e4f66

This commit also seems to always read the session id from the cookies - independently of use_cookies = false.

How to reproduce

In framework.yaml set

framework:
    session:
        use_cookies: false

and somewhere in a controller read the session via

$request->getSession()->all()

Possible Solution

No response

Additional Context

No response