Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-3221

flushOnSessionInvalidation attribute in jboss-web.xml does not flush user credentials

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Critical
    • 9.0.0.Beta1
    • 8.0.0.Final
    • Security
    • None

    Description

      The attribute flushOnSessionInvalidation does not flush the user credentials when the session is invalidated or when it times out. If the password or roles change for the user, the only way to get the new changes is by restarting the server.

      I tried removing "cache-type=default" from the standalone-full.xml and it works, but for every action made on the site, the login method in the authentication module is called.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. WFLY-3844 Authentication cache is not flushed on logout

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. WFLY-5546 The flushOnSessionInvalidation is not parsed correctly from jboss-web.xml

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            Public project attachment banner

              context keys: [headless, issue, helper, isAsynchronousRequest, project, action, user]
              current Project key: WFLY

              People

                sdouglas1@redhat.com Stuart Douglas
                jimarmol_jira Jorge Marmolejo (Inactive)
                Votes:
                15 Vote for this issue
                Watchers:
                17 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: