79191747

Date: 2024-11-15 09:30:11
Score: 1
Natty:
Report link

With the logoutFilter.destroySession = true configuration, the web session should be invalidated at logout. And so should be deleted the @SessionScoped beans.

Can you turn on DEBUG logs on org.pac4j.jee.context.session.JEESessionStore and check if you see the log: Invalidate session: xxx?

Reasons:
  • Low length (0.5):
  • Has code block (-0.5):
  • Ends in question mark (2):
  • High reputation (-1):
Posted by: jleleu