567393a102
When logging out via application (via ?GLO=true query parameter), CatalineSamlSessionStore does not expire session, while it does that in logging by SAML session index. This causes distributed sessions being invalidated only on node hanling the request, but remains active in other nodes of the cluster. Then the session can be resurrected on next cache replication back even to the node where the logout was performed. This behaviour is fixed here. |
||
|---|---|---|
| .. | ||
| oidc | ||
| saml | ||
| spi | ||
| pom.xml | ||