. Fix for AWC-552

- Alfresco external auth session marker was being checked for after the session had already been invalidated

git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@2454 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
Kevin Roast
2006-02-21 08:43:02 +00:00
parent d8992c396f
commit 021f079d42

View File

@@ -352,6 +352,9 @@ public class LoginBean
Map session = context.getExternalContext().getSessionMap();
User user = (User) session.get(AuthenticationHelper.AUTHENTICATION_USER);
// need to capture this value before invalidating the session
boolean externalAuth = isAlfrescoAuth();
// Invalidate Session for this user.
// This causes the sessionDestroyed() event to be processed by ContextListener
// which is responsible for invalidating the ticket and clearing the security context
@@ -378,7 +381,7 @@ public class LoginBean
Application.setLanguage(context, this.language);
}
return isAlfrescoAuth() ? "logout" : "relogin";
return externalAuth ? "logout" : "relogin";
}