[jboss-jira] [JBoss JIRA] (WFLY-5484) Calling HttpServletRequest.logout() with single sign-on enabled only works every second time
[
https://issues.jboss.org/browse/WFLY-5484?page=com.atlassian.jira.plugin....
]
Richard Janík commented on WFLY-5484:
-------------------------------------
Fix version has changed to 10.0.0.CR5. That has not been released yet either, but the
master branch already contains the fix from https://github.com/wildfly/wildfly/pull/8326
. The issue is still present in master branch (commit
1ed22f0de64b258a7205c253aee7eace3f96f4e4). Based on Pauls previous comment, I'll not
reopen the issue until I can reproduce it with fix version, when it is released.
Note: master at the above mentioned commit depends on wildfly-core 2.0.3, which depends on
Undertow 1.3.7, which means that https://github.com/undertow-io/undertow/pull/340/commits
should be in as well.
Calling HttpServletRequest.logout() with single sign-on enabled only
works every second time
--------------------------------------------------------------------------------------------
Key: WFLY-5484
URL: https://issues.jboss.org/browse/WFLY-5484
Project: WildFly
Issue Type: Bug
Components: Clustering, Web (Undertow)
Reporter: Richard Janík
Assignee: Paul Ferraro
Priority: Blocker
Fix For: 10.0.0.CR5
See "Steps to Reproduce". Logging out from an application only works every
second time, e.g. HttpRequestServlet.logout() has to be called twice in order to have any
effect
This doesn't occur without <single-sign-on/> enabled - logout() has the
expected effect. The issue is security related, thus I'm adding our security team
members as watchers.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)