[jboss-jira] [JBoss JIRA] (WFLY-5484) Calling HttpServletRequest.logout() with single sign-on enabled only works every second time

[Richard Janík (JIRA)]

    [ https://issues.jboss.org/browse/WFLY-5484?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13136085#comment-13136085 ] 

Richard Janík commented on WFLY-5484:
-------------------------------------

Fix version has changed to 10.0.0.CR5. That has not been released yet either, but the master branch already contains the fix from  https://github.com/wildfly/wildfly/pull/8326 . The issue is still present in master branch (commit 1ed22f0de64b258a7205c253aee7eace3f96f4e4). Based on Pauls previous comment, I'll not reopen the issue until I can reproduce it with fix version, when it is released.

Note: master at the above mentioned commit depends on wildfly-core 2.0.3, which depends on Undertow 1.3.7, which means that https://github.com/undertow-io/undertow/pull/340/commits should be in as well.

> Calling HttpServletRequest.logout() with single sign-on enabled only works every second time
> --------------------------------------------------------------------------------------------
>
>                 Key: WFLY-5484
>                 URL: https://issues.jboss.org/browse/WFLY-5484
>             Project: WildFly
>          Issue Type: Bug
>          Components: Clustering, Web (Undertow)
>            Reporter: Richard Janík
>            Assignee: Paul Ferraro
>            Priority: Blocker
>             Fix For: 10.0.0.CR5
>
>
> See "Steps to Reproduce". Logging out from an application only works every second time, e.g. HttpRequestServlet.logout() has to be called twice in order to have any effect
> This doesn't occur without <single-sign-on/> enabled - logout() has the expected effect. The issue is security related, thus I'm adding our security team members as watchers.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)