[
https://issues.apache.org/jira/browse/SLING-2391?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Felix Meschberger updated SLING-2391:
-------------------------------------
Issue Type: Bug (was: Improvement)
This is really a bug...
> Make sure the impersonation cookie is cleared on logout
> -------------------------------------------------------
>
> Key: SLING-2391
> URL: https://issues.apache.org/jira/browse/SLING-2391
> Project: Sling
> Issue Type: Bug
> Components: Authentication
> Affects Versions: Auth Core 1.0.6
> Reporter: Felix Meschberger
> Assignee: Felix Meschberger
> Fix For: Auth Core 1.1.0
>
>
> On logout the impersonation cookie is not currently cleared. This causes
> impersonation to remain active even for the next login.
> This may be a security problem as well as preventing the user to not be able
> to work on the instance if trying to log in with a user not able to
> impersonate.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
