Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

trackLoggedOutSSOCookies setting causing multiple login failure #5970

Closed
una-tapa opened this issue Dec 6, 2018 · 1 comment
Closed

trackLoggedOutSSOCookies setting causing multiple login failure #5970

una-tapa opened this issue Dec 6, 2018 · 1 comment
Assignees
Labels
release bug This bug is present in a released version of Open Liberty release:19001

Comments

@una-tapa
Copy link
Member

una-tapa commented Dec 6, 2018

Issue:
When application performs HttpServletRequest.logout(), Liberty fails to remove LtpaToken from its AuthCache. This causes unexpected behavior when trackLoggedOutSSOCookies flag is set to true.
When a user login from a browser for the first time (without LtpaToken), Liberty would still find LtpaToken in the AuthCache. Since this token is now tracked as logged-out-token, the user can no longer login.

@una-tapa una-tapa self-assigned this Dec 6, 2018
@una-tapa una-tapa added the release bug This bug is present in a released version of Open Liberty label Dec 6, 2018
@una-tapa
Copy link
Member Author

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
release bug This bug is present in a released version of Open Liberty release:19001
Projects
None yet
Development

No branches or pull requests

2 participants