You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@cxf.apache.org by "Jan Bernhardt (JIRA)" <ji...@apache.org> on 2015/01/29 14:51:35 UTC

[jira] [Created] (FEDIZ-96) Nullpointer exception if logout is called before login

Jan Bernhardt created FEDIZ-96:
----------------------------------

             Summary: Nullpointer exception if logout is called before login
                 Key: FEDIZ-96
                 URL: https://issues.apache.org/jira/browse/FEDIZ-96
             Project: CXF-Fediz
          Issue Type: Bug
          Components: IDP
    Affects Versions: 1.1.2
            Reporter: Jan Bernhardt
            Priority: Minor
             Fix For: 1.2.0


If you invoke the logout URL twice or if your session has timed out, you will get a NullPointerException instead of a logout page.

According to the WS-Federation standard, a logout request should be idempotent, thus it should be possible to invoke logout on a non existing session without causing an exception.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)