[jboss-dev-forums] [Security Development] New message: "Re: Auth Cache is not flushed after logout"

[Harry Yan]

JBoss development,

A new message was posted in the thread "Auth Cache is not flushed after logout":

http://community.jboss.org/message/527552#527552

Author  : Harry Yan
Profile : http://community.jboss.org/people/seekerYan

Message:
--------------------------------------------------------------
Hi, thanks for your reply, i tried that before, but it throws exception "session already in invalid state", as after the webAuthentication.logout() is called, the session is invalid and request.getSession().invalidate() will fail.

--------------------------------------------------------------

To reply to this message visit the message page: http://community.jboss.org/message/527552#527552