[jboss-jira] [JBoss JIRA] (WFLY-8252) HttpServletRequest.logout() doesn't work with Elytron

[Pedro Igor (JIRA)]

     [ https://issues.jboss.org/browse/WFLY-8252?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Pedro Igor reassigned WFLY-8252:
--------------------------------

    Assignee: Pedro Igor  (was: Stuart Douglas)


> HttpServletRequest.logout() doesn't work with Elytron
> -----------------------------------------------------
>
>                 Key: WFLY-8252
>                 URL: https://issues.jboss.org/browse/WFLY-8252
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security, Web (Undertow)
>            Reporter: Josef Cacek
>            Assignee: Pedro Igor
>            Priority: Blocker
>
> Calling {{HttpServletRequest.logout()}} leaves user logged in if Elytron security is used.
> This means security flaw, therefor setting priority to blocker.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)