Martin Grigorov created WICKET-6668:
---------------------------------------
Summary: Sign out the existing session if a sign in attempt has
failed
Key: WICKET-6668
URL: https://issues.apache.org/jira/browse/WICKET-6668
Project: Wicket
Issue Type: Improvement
Components: wicket-auth-roles
Affects Versions: 8.4.0, 9.0.0-M2
Reporter: Martin Grigorov
Assignee: Martin Grigorov
If a user is already authenticated but still (s)he goes to the login page and
tries to sign in again with invalid credentials Wicket does not fail the
attempt but continues successfully.
The correct behavior would be to report the signIn failure with error feedback
message and to sign out the already authenticated user.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
