Uploaded image for project: 'Railo'
  1. Railo
  2. RAILO-1222

getPageContext().getSession().invalidate() breaks the creation of new session

    Details

    • Steps to Reproduce:
      Hide

      In your logout code add the getPageContext().getSession().invalidate() call. Dump the session scope on a page and refresh. Watch the session token, once you have logged out, each request will create a new session even though the logout code is not running with each request (make sure you remove the flag for a logout before refreshing).

      Show
      In your logout code add the getPageContext().getSession().invalidate() call. Dump the session scope on a page and refresh. Watch the session token, once you have logged out, each request will create a new session even though the logout code is not running with each request (make sure you remove the flag for a logout before refreshing).

      Description

      When you invalidate a session with getPageContext().getSession().invalidate() in a logout, the user cannot establish a new persistent session.

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                micstriit Michael Offner
                Reporter:
                designfrontier Daniel Sellers
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated: