-
Bug
-
Resolution: Fixed
-
Critical
-
None
-
None
-
None
Steps to reproduce
- Open 2 sessions to admicentral for same user (incognito win e.q.)
- Change user password in user detail
.. Logs, screenshots, gifs...
Expected results
Dialog should popup and ask if we want to logout all sessions
.. Justify non-trivial expectations with a link to a doc or a relevant discussion.
Actual results
No dialog is shown as there is no session stored for user in SessionStore
Workaround
Development notes
- Affect both 6.2 and 6.3 SNAPSHOT
- Cause by the changes from
MAGNOLIA-9200in LoginHandler#renewSession which will create a new anonymous HttpSession (without login subject attribute) instead of an authenticated session via https://git.magnolia-cms.com/projects/PLATFORM/repos/main/browse/magnolia-core/src/main/java/info/magnolia/context/RequestAttributeStrategy.java?at=refs%2Fheads%2Frelease%2F6.2#176,179
Acceptance criteria
- is caused by
-
MAGNOLIA-9200 Add the renewSession and logout functionality to LoginHandler and support LoginHandlers for LogoutFilter
- Closed