Uploaded image for project: 'Undertow'
  1. Undertow
  2. UNDERTOW-2418

Adjust properly session timeout also in case when FORM is combined with other mechanisms

XMLWordPrintable

      If the FORM mechanism is used in conjunction with another, then the short session timeout from UNDERTOW-2378 / UNDERTOW-2264 is still seen after login. This is because the FORM mech will set its short timeout through the challenge phase, but it is not guaranteed that ServletFormAuthenticationMechanism.authenticate will be called. The client may authenticate with one of the other available mechanisms, leaving the short session timeout.

        1. UNDERTOW-2418reproducer.tar.xz
          22 kB

            flaviarnn Flavia Rainone
            rhn-support-aogburn Aaron Ogburn
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: