From 5911234f65cb8377c3fd428937dce29c80c8b6f0 Mon Sep 17 00:00:00 2001
From: Ben Alex <ben.alex@springsource.com>
Date: Mon, 13 Nov 2006 06:05:28 +0000
Subject: [PATCH] SEC-359: Logout even if not logged in.

---
 .../main/java/org/acegisecurity/ui/logout/LogoutFilter.java | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/core/src/main/java/org/acegisecurity/ui/logout/LogoutFilter.java b/core/src/main/java/org/acegisecurity/ui/logout/LogoutFilter.java
index 782d244bcf..44d155c1a2 100644
--- a/core/src/main/java/org/acegisecurity/ui/logout/LogoutFilter.java
+++ b/core/src/main/java/org/acegisecurity/ui/logout/LogoutFilter.java
@@ -94,10 +94,8 @@ public class LogoutFilter implements Filter {
                 logger.debug("Logging out user '" + auth + "' and redirecting to logout page");
             }
 
-            if (auth != null) {
-                for (int i = 0; i < handlers.length; i++) {
-                    handlers[i].logout(httpRequest, httpResponse, auth);
-                }
+            for (int i = 0; i < handlers.length; i++) {
+                handlers[i].logout(httpRequest, httpResponse, auth);
             }
 
             sendRedirect(httpRequest, httpResponse, logoutSuccessUrl);