[NIFI-8697] If JWT Token no longer valid, cookie should be removed

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.14.0
• Component/s: Core Framework, Core UI
• Assignee: Mark Payne
• Reporter: Mark Payne
• Created: 14/Jun/21 18:33
• Updated: 14/Jun/21 20:07
• Resolved: 14/Jun/21 20:07

Description

I was able to successfully login to my NiFi instance. I then shutdown and deleted the database_repository directory. Upon restart, I was able to login to NiFi, as the JWT token was no longer valid. However, going to /logout didn't remove the token either.

If the JWT Token is no longer valid when attempting to login, the endpoint should request that the cookie be deleted. In fact, going to /logout actually threw a NullPointerException.

Issue Links

• links to: GitHub Pull Request #5155