David Ostrovsky 6b18e3a003 Invalidate OAuth session after web_sessions cache expiration ...

When web_sessions cache is expired, OAuth session preserves it
logged in state. This makes new sign-in impossible.

Rectify it by checking the states mismatch and invalidating OAuth
session when web_sessions cache was expired.

GitHub-Bug: https://github.com/davido/gerrit-oauth-provider/issues/5
Change-Id: I3d57193c5af29561fd1fac0804dd19c08a0e9dbe

2015-04-12 10:43:25 +02:00

..

src/main

Invalidate OAuth session after web_sessions cache expiration

2015-04-12 10:43:25 +02:00

BUCK

OAuth: Allow to link claimed identity to existing accounts

2015-03-20 07:31:40 +01:00