Minor This is not the job of the OAuth2 servlet to invalidate the HTTP session. Moreover, the servlet does not use anymore the HTTP session to store things and is completely stateless.
Do not invalidate the HTTP session in the OAuth2 servlet
-
- Assignee:
-
Thomas Roger
- Reporter:
-
- Participants:
-
- Votes:
-
0 Vote for this issue
- Watchers:
-
3 Start watching this issue
