[
https://issues.apache.org/jira/browse/FEDIZ-96?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14358298#comment-14358298
]
Jan Bernhardt commented on FEDIZ-96:
------------------------------------
I think you need to apply the same patch for {{signoutresponse.jsp}} to
{{signoutconfirmationresponse.jsp}}
> Nullpointer exception if logout is called before login
> ------------------------------------------------------
>
> Key: FEDIZ-96
> URL: https://issues.apache.org/jira/browse/FEDIZ-96
> Project: CXF-Fediz
> Issue Type: Bug
> Components: IDP
> Affects Versions: 1.1.2
> Reporter: Jan Bernhardt
> Assignee: Colm O hEigeartaigh
> Priority: Minor
> Fix For: 1.2.0
>
>
> If you invoke the logout URL twice or if your session has timed out, you will
> get a NullPointerException instead of a logout page.
> According to the WS-Federation standard, a logout request should be
> idempotent, thus it should be possible to invoke logout on a non existing
> session without causing an exception.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
