Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-19333

Kills jsp auto-created guess session after logout

    Details

    • Branch Version/s:
      6.1.x
    • Backported to Branch:
      Committed

      Description

      In LogoutAction, the session is invalidated, however when the request is forwarded to referer_js.jsp, the jsp file automatically creates a new guest session. This guest session won't be used if the logout user is not coming back. Even he indeed comes back, it is still safe to invalidate the current guess session(No valid data in session at this point of time), let the user gets a new one when coming back.

      This force killing should only be used when the referer_js.jsp is forwarded from LogoutAction, this is indicated by a ThreadLocal flag.

        Attachments

          Activity

            People

            Assignee:
            support-lep@liferay.com SE Support
            Reporter:
            shuyang.zhou Shuyang Zhou
            Participants of an Issue:
            Recent user:
            Esther Sanz
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Days since last comment:
              9 years, 20 weeks, 4 days ago

                Packages

                Version Package
                6.1.1 CE GA2
                6.1.20 EE GA2
                6.2.0 CE M2