Merge "Hybrid OpenID/OAuth: Check for session validity during logout" into stable-2.10
This commit is contained in:
commit
e6782847f8
@ -52,6 +52,8 @@ class OAuthOverOpenIDLogoutServlet extends HttpLogoutServlet {
|
||||
protected void doLogout(HttpServletRequest req, HttpServletResponse rsp)
|
||||
throws IOException {
|
||||
super.doLogout(req, rsp);
|
||||
oauthSession.get().logout();
|
||||
if (req.getSession(false) != null) {
|
||||
oauthSession.get().logout();
|
||||
}
|
||||
}
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user