[jboss-jira] [JBoss JIRA] (WFLY-3221) flushOnSessionInvalidation attribute in jboss-web.xml does not flush user credentials

[Jorge Marmolejo (JIRA)]

Jorge Marmolejo created WFLY-3221:
-------------------------------------

             Summary: flushOnSessionInvalidation attribute in jboss-web.xml does not flush user credentials
                 Key: WFLY-3221
                 URL: https://issues.jboss.org/browse/WFLY-3221
             Project: WildFly
          Issue Type: Bug
      Security Level: Public (Everyone can see)
    Affects Versions: 8.0.0.Final
            Reporter: Jorge Marmolejo


The attribute flushOnSessionInvalidation  does not flush the user credentials when the session is invalidated or when it times out. If the password or roles change for the user, the only way to get the new changes is by restarting the server.

I tried remove "cache-type=default" from the standalone-full.xml and it works, but for every action made on the side the login method in the authentication module is called.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira