[jboss-jira] [JBoss JIRA] (WFLY-8252) HttpServletRequest.logout() doesn't work with Elytron
[
https://issues.jboss.org/browse/WFLY-8252?page=com.atlassian.jira.plugin....
]
Pedro Igor reassigned WFLY-8252:
--------------------------------
Assignee: Pedro Igor (was: Stuart Douglas)
HttpServletRequest.logout() doesn't work with Elytron
-----------------------------------------------------
Key: WFLY-8252
URL: https://issues.jboss.org/browse/WFLY-8252
Project: WildFly
Issue Type: Bug
Components: Security, Web (Undertow)
Reporter: Josef Cacek
Assignee: Pedro Igor
Priority: Blocker
Calling {{HttpServletRequest.logout()}} leaves user logged in if Elytron security is
used.
This means security flaw, therefor setting priority to blocker.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)