You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by kf...@apache.org on 2013/01/29 08:04:53 UTC

svn commit: r1439757 - /tomcat/trunk/java/org/apache/catalina/authenticator/SingleSignOn.java

Author: kfujino
Date: Tue Jan 29 07:04:52 2013
New Revision: 1439757

URL: http://svn.apache.org/viewvc?rev=1439757&view=rev
Log:
Prevent the SSO deregister when web application is stopped or reloaded.
When StandardManager(pathname="") or DeltaManager stops normally, all sessions in the context are expired.
In this case, because most sessions is not time-out, SSO deregister was triggered.

Modified:
    tomcat/trunk/java/org/apache/catalina/authenticator/SingleSignOn.java

Modified: tomcat/trunk/java/org/apache/catalina/authenticator/SingleSignOn.java
URL: http://svn.apache.org/viewvc/tomcat/trunk/java/org/apache/catalina/authenticator/SingleSignOn.java?rev=1439757&r1=1439756&r2=1439757&view=diff
==============================================================================
--- tomcat/trunk/java/org/apache/catalina/authenticator/SingleSignOn.java (original)
+++ tomcat/trunk/java/org/apache/catalina/authenticator/SingleSignOn.java Tue Jan 29 07:04:52 2013
@@ -224,7 +224,8 @@ public class SingleSignOn extends ValveB
         if (((session.getMaxInactiveInterval() > 0)
             && (System.currentTimeMillis() - session.getThisAccessedTimeInternal() >=
                 session.getMaxInactiveInterval() * 1000))
-            || (Session.SESSION_PASSIVATED_EVENT.equals(event.getType()))) {
+            || (Session.SESSION_PASSIVATED_EVENT.equals(event.getType()))
+            || (!session.getManager().getContext().getState().isAvailable())) {
             removeSession(ssoId, session);
         } else {
             // The session was logged out.



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org