Make sure the impersonation cookie is cleared on logout
-------------------------------------------------------

                 Key: SLING-2391
                 URL: https://issues.apache.org/jira/browse/SLING-2391
             Project: Sling
          Issue Type: Improvement
          Components: Authentication
    Affects Versions: Auth Core 1.0.6
            Reporter: Felix Meschberger
            Assignee: Felix Meschberger
             Fix For: Auth Core 1.1.0


On logout the impersonation cookie is not currently cleared. This causes 
impersonation to remain active even for the next login.

This may be a security problem as well as preventing the user to not be able to 
work on the instance if trying to log in with a user not able to impersonate.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to