[GERONIMO-3628] Review GeronimoPasswordCredentialLoginModule

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.2, 2.1
• Fix Version/s: 2.0.3, 2.1
• Component/s: security
• Security Level: public (Regular issues)
• Assignee: Vamsavardhana Reddy
• Reporter: Vamsavardhana Reddy
• Created: 24/Nov/07 14:35
• Updated: 23/Jul/08 20:43
• Resolved: 07/Dec/07 18:35

Description

Review GeronimoPasswordCredentialLoginModule for potential violations and security risks.
o LoginModule should remove/destroy credentials from subject upon logout.