Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-6052

NPE on session.invalidate()

    XMLWordPrintable

    Details

    • Steps to Reproduce:
      Hide
      • enable single-sign-on
      • deploy 2 web apps that are not 'distributable'
      • login to one on the web app
      • navigate to the other webapp (no authentication is needed)
      • make a call to the for webapp that will call session.invalidate()

      -> NPE

      Show
      enable single-sign-on deploy 2 web apps that are not 'distributable' login to one on the web app navigate to the other webapp (no authentication is needed) make a call to the for webapp that will call session.invalidate() -> NPE

      Description

      I created a discussion about the issue some time ago but got not answer.
      See: https://developer.jboss.org/message/946976#946976

      The problem is that when a webapp is not marked as 'distributable' the undertow InMemorySessionManager is used.
      As mentioned in the discussion the 'getSession' of this manager does not like to be called with a null parameter, which is what willdfy does.
      This happens when single-sign-on is enable and multiple sessions are associated to the same sso session and 'invalidate' is called on one of the session.

      The workaround is to marked all our webapps as distributable but this will have a performance impact.

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                swd847 Stuart Douglas
                Reporter:
                jamat Juan AMAT
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: