Does SessionAuthenticationModule set IClaimsPrincipal on Thread.Principal or HttpContext.Current.User

Question

Wouldn't it be a mistake to set it on the thread?

Answer 1

Both HttpContext.Current.User and Thread.CurrentPrincipal are set with an IClaimsPrincipal (the same instance in fact)