[SLING-2391] Make sure the impersonation cookie is cleared on logout

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Auth Core 1.0.6
• Fix Version/s: Auth Core 1.1.0
• Component/s: Authentication
• Assignee: Felix Meschberger
• Reporter: Felix Meschberger
• Created: 30/Jan/12 11:50
• Updated: 30/Nov/12 17:56
• Resolved: 30/Jan/12 11:53

Description

On logout the impersonation cookie is not currently cleared. This causes impersonation to remain active even for the next login.

This may be a security problem as well as preventing the user to not be able to work on the instance if trying to log in with a user not able to impersonate.