-
Bug
-
Resolution: Done
-
Major
-
7.4.12.GA
-
False
-
None
-
False
-
-
-
-
-
-
-
-
After JBEAP-15303, invalidating a session in a config using Undertow SSO results in an UnsupportedOperationException being thrown by invalidation attempted on any other session associated with the SSO entry:
Caused by: java.lang.UnsupportedOperationException at org.wildfly.clustering.web.undertow@7.4.12.GA-redhat-00003//org.wildfly.clustering.web.undertow.sso.DistributableSingleSignOn$SimpleSessionConfig.setSessionId(DistributableSingleSignOn.java:256) at org.wildfly.clustering.web.undertow@7.4.12.GA-redhat-00003//org.wildfly.clustering.web.undertow.session.DistributableSessionManager.getSession(DistributableSessionManager.java:233) at org.wildfly.clustering.web.undertow@7.4.12.GA-redhat-00003//org.wildfly.clustering.web.undertow.sso.DistributableSingleSignOn$InvalidatableSession.invalidate(DistributableSingleSignOn.java:182) at io.undertow.core@2.2.25.SP3-redhat-00001//io.undertow.security.impl.SingleSignOnAuthenticationMechanism$SessionInvalidationListener.sessionDestroyed(SingleSignOnAuthenticationMechanism.java:213) at io.undertow.core@2.2.25.SP3-redhat-00001//io.undertow.server.session.SessionListeners.sessionDestroyed(SessionListeners.java:61) at org.wildfly.clustering.web.undertow@7.4.12.GA-redhat-00003//org.wildfly.clustering.web.undertow.session.DistributableSession.invalidate(DistributableSession.java:276) at io.undertow.servlet@2.2.25.SP3-redhat-00001//io.undertow.servlet.spec.HttpSessionImpl.invalidate(HttpSessionImpl.java:198) at org.apache.jsp.invalidate_jsp._jspService(invalidate_jsp.java:96) at io.undertow.jsp@2.0.14.Final-redhat-00001//org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70) at javax.servlet.api@2.0.0.Final-redhat-00001//javax.servlet.http.HttpServlet.service(HttpServlet.java:590) at io.undertow.jsp@2.0.14.Final-redhat-00001//org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:433) ... 51 more
So this requires a fix similar to JBEAP-24362.
- is caused by
-
JBEAP-15303 [GSS](7.4.z) WFLY-10912 - CodecSessionConfig#findSessionId() causes an incorrect JSESSIONID Set-Cookie header
-
- Closed
-