[QPID-7047] SaslServlet should invalidate the HTTP session in the event of authentication/authorisation failure - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: qpid-java-6.1
Component/s: Broker-J
Labels:
None

Description

If SASL authentication over HTTP fails, the HTTP session is currently retained. This should be changed so that it is automatically invalidated on these two paths.

Attachments

Activity

People

Assignee:: Lorenz Quack

Reporter:: Keith Wall

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Created:: 04/Feb/16 13:18

Updated:: 02/Oct/19 19:22

Resolved:: 30/Jun/16 14:42