Cwikius-Spring/spring-security
1
0
Fork 0
mirror of synced 2026-08-05 01:36:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

SEC-1379: Added creation of a session if session timeout is detected (requested session ID is invalid).

Browse Source 
This prevents problems with repeated detection of the same invalid session when the redirected request comes in.
This commit is contained in:
Luke Taylor
2010-01-23 00:10:32 +00:00
parent d931495c8a
commit 0974e21fb6
3 changed files with 16 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/src/main/java/org/springframework/security/web/session/SessionManagementFilter.java
+2 -1
View File
@@ -84,7 +84,8 @@ public class SessionManagementFilter extends GenericFilterBean {
logger.debug("Requested session ID" + request.getRequestedSessionId() + " is invalid.");
if (invalidSessionUrl != null) {
logger.debug("Redirecting to '" + invalidSessionUrl + "'");
logger.debug("Starting new session (if required) and redirecting to '" + invalidSessionUrl + "'");
request.getSession();
redirectStrategy.sendRedirect(request, response, invalidSessionUrl);
return;