opendev/gerrit
Code Issues Proposed changes

Merge "OAuth: Check for session validity during logout" into stable-2.10

Browse Source
This commit is contained in:
Saša Živkov
2015-05-06 13:00:20 +00:00
committed by Gerrit Code Review
parent a82964fb7a 8573bed76a
commit bad310ec3f
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
gerrit-oauth/src/main/java/com/google/gerrit/httpd/auth/oauth/OAuthLogoutServlet.java
View File

@@ -52,6 +52,8 @@ class OAuthLogoutServlet extends HttpLogoutServlet {
protected void doLogout(HttpServletRequest req, HttpServletResponse rsp)
throws IOException {
super.doLogout(req, rsp);
oauthSession.get().logout();
if (req.getSession(false) != null) {
oauthSession.get().logout();
}
}
}