[
https://issues.apache.org/jira/browse/JCR-2894?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
angela resolved JCR-2894.
-------------------------
Resolution: Fixed
> AbstractLoginModule#logout() : credentials will not be clared as
> Subject.getPublicCredentials(Class) isn't backed by the subject internal set
> ---------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: JCR-2894
> URL: https://issues.apache.org/jira/browse/JCR-2894
> Project: Jackrabbit Content Repository
> Issue Type: Bug
> Components: jackrabbit-core, security
> Reporter: angela
> Assignee: angela
> Priority: Minor
> Fix For: 2.3.0
>
>
> AbstractLoginModule#logout() clears the credentials list retrieved by
> calling Subject.getPublicCredentials(Class).
> this doesn't have the desired effect as the returned set isn't backed by the
> subjects internal credentials set. (see API documentation of
> javax.security.auth.Subject)
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
