You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@wicket.apache.org by "Martin Grigorov (JIRA)" <ji...@apache.org> on 2019/05/16 05:42:00 UTC

[jira] [Created] (WICKET-6668) Sign out the existing session if a sign in attempt has failed

Martin Grigorov created WICKET-6668:
---------------------------------------

             Summary: Sign out the existing session if a sign in attempt has failed
                 Key: WICKET-6668
                 URL: https://issues.apache.org/jira/browse/WICKET-6668
             Project: Wicket
          Issue Type: Improvement
          Components: wicket-auth-roles
    Affects Versions: 8.4.0, 9.0.0-M2
            Reporter: Martin Grigorov
            Assignee: Martin Grigorov


If a user is already authenticated but still (s)he goes to the login page and tries to sign in again with invalid credentials Wicket does not fail the attempt but continues successfully.

The correct behavior would be to report the signIn failure with error feedback message and to sign out the already authenticated user.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)