keycloak-scim/adapters/saml/tomcat/tomcat-core
Hynek Mlnarik 567393a102 KEYCLOAK-4288 Fix SAML logout session for Tomcat/EAP6
When logging out via application (via ?GLO=true query parameter),
CatalineSamlSessionStore does not expire session, while it does that
in logging by SAML session index.

This causes distributed sessions being invalidated only on node hanling
the request, but remains active in other nodes of the cluster. Then the
session can be resurrected on next cache replication back even to the
node where the logout was performed. This behaviour is fixed here.
2017-03-01 15:17:39 +01:00
..
src/main/java/org/keycloak/adapters/saml KEYCLOAK-4288 Fix SAML logout session for Tomcat/EAP6 2017-03-01 15:17:39 +01:00
pom.xml Bump version to 3.0.0.CR1 2017-01-26 06:18:11 +01:00