cxf-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jan Bernhardt (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (FEDIZ-96) Nullpointer exception if logout is called before login
Date Thu, 12 Mar 2015 08:31:38 GMT

    [ https://issues.apache.org/jira/browse/FEDIZ-96?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14358298#comment-14358298
] 

Jan Bernhardt commented on FEDIZ-96:
------------------------------------

I think you need to apply the same patch for {{signoutresponse.jsp}} to {{signoutconfirmationresponse.jsp}}

> Nullpointer exception if logout is called before login
> ------------------------------------------------------
>
>                 Key: FEDIZ-96
>                 URL: https://issues.apache.org/jira/browse/FEDIZ-96
>             Project: CXF-Fediz
>          Issue Type: Bug
>          Components: IDP
>    Affects Versions: 1.1.2
>            Reporter: Jan Bernhardt
>            Assignee: Colm O hEigeartaigh
>            Priority: Minor
>             Fix For: 1.2.0
>
>
> If you invoke the logout URL twice or if your session has timed out, you will get a NullPointerException
instead of a logout page.
> According to the WS-Federation standard, a logout request should be idempotent, thus
it should be possible to invoke logout on a non existing session without causing an exception.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message