From f5468087c2d5e27d48add9e648f7f9268637fd2b Mon Sep 17 00:00:00 2001
From: Luke Taylor <luke.taylor@springsource.com>
Date: Thu, 15 Apr 2010 23:18:11 +0100
Subject: [PATCH] Remove cached DiscoveryInformation from session in
 OpenID4JavaConsumer's endConsumption method.

---
 .../org/springframework/security/openid/OpenID4JavaConsumer.java | 1 +
 1 file changed, 1 insertion(+)

diff --git a/openid/src/main/java/org/springframework/security/openid/OpenID4JavaConsumer.java b/openid/src/main/java/org/springframework/security/openid/OpenID4JavaConsumer.java
index ed44c5d281..eb747aa4aa 100644
--- a/openid/src/main/java/org/springframework/security/openid/OpenID4JavaConsumer.java
+++ b/openid/src/main/java/org/springframework/security/openid/OpenID4JavaConsumer.java
@@ -113,6 +113,7 @@ public class OpenID4JavaConsumer implements OpenIDConsumer {
 
         // retrieve the previously stored discovery information
         DiscoveryInformation discovered = (DiscoveryInformation) request.getSession().getAttribute(DISCOVERY_INFO_KEY);
+        request.getSession().removeAttribute(DISCOVERY_INFO_KEY);
 
         // extract the receiving URL from the HTTP request
         StringBuffer receivingURL = request.getRequestURL();