Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Done
Priority: Major
Fix Version/s: 10.0.0.Final
Affects Version/s: 10.0.0.CR5
Component/s: Web (Undertow)
Labels:
None

Steps to Reproduce:
Hide

enable single-sign-on

deploy 2 web apps that are not 'distributable'

login to one on the web app

navigate to the other webapp (no authentication is needed)

make a call to the for webapp that will call session.invalidate()

-> NPE
Show
enable single-sign-on deploy 2 web apps that are not 'distributable' login to one on the web app navigate to the other webapp (no authentication is needed) make a call to the for webapp that will call session.invalidate() -> NPE

Description

I created a discussion about the issue some time ago but got not answer.
See: https://developer.jboss.org/message/946976#946976

The problem is that when a webapp is not marked as 'distributable' the undertow InMemorySessionManager is used.
As mentioned in the discussion the 'getSession' of this manager does not like to be called with a null parameter, which is what willdfy does.
This happens when single-sign-on is enable and multiple sessions are associated to the same sso session and 'invalidate' is called on one of the session.

The workaround is to marked all our webapps as distributable but this will have a performance impact.

Attachments

Activity

People

Assignee:: Stuart Douglas

Reporter:: Juan AMAT (Inactive)

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Created:: 2016/01/22 3:27 PM

Updated:: 2017/12/06 11:35 AM

Resolved:: 2016/01/31 4:26 PM