|
|
|
|
|
|
5/3/2017 4:15:57 AM
SAML logouts are not invalidating the sessions for all the logged in applications
|
|
|
|
|
|
|
|
|
2/16/2017 12:32:05 PM
session mappings
|
2/24/2017 8:11:41 AM
logging out via application (via ?GLO=true query parameter),
CatalineSamlSessionStore does not expire session, while it does that
in logging by SAML session index.
This causes distributed sessions being invalidated only on node hanling
the request, but remains active in other nodes of the cluster. Then the
session can be resurrected on next cache replication back even to the
node where the logout was performed. This behaviour is fixed here.
|
