Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RESTWS-905 | Session should be invalidated only if its a valid session #570

Merged
merged 1 commit into from Feb 1, 2023

Conversation

angshu
Copy link
Member

@angshu angshu commented Feb 1, 2023

In case a DELETE call is not accompanied with a JSESSIONID (e.g. in case of COOKIE expiry), the current code was invalidating a newly created session, resulting in subsequent calls failing with the JSESSIONID sent back thats already invalidated. (the user can not proceed without clearing the app cache or waiting for the cookie to expire)

…n. In case a DELETE call is not accompanied with a sessionId (e.g. in case of COOKIE expiry), the current code was invalidating a newly created session, resulting in subsequent calls failing with the SESSIONID sent back.
@ibacher
Copy link
Member

ibacher commented Feb 1, 2023

Thanks @angshu!

@ibacher ibacher merged commit a9f174a into openmrs:master Feb 1, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants