JENKINS-52306 Improve SSO logout, continuous fix for JENKINS-11507

jenkinsci · Apr 21, 2022 · 8fd94d9 · 8fd94d9
1 parent be3c377
commit 8fd94d9
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/src/main/java/de/theit/jenkins/crowd/CrowdServletFilter.java b/src/main/java/de/theit/jenkins/crowd/CrowdServletFilter.java
@@ -182,6 +182,15 @@ public void doFilter(ServletRequest request, ServletResponse response,
                                 LOG.fine("User sucessfully logged in");
                             }
                             sc.setAuthentication(auth);
+                        } else { // Auto login failed.
+                            if (LOG.isLoggable(Level.FINE)) {
+                                LOG.fine("User failed to log in");
+                            }
+                            HttpSession session = req.getSession(false);
+                            if (session != null) {
+                                session.invalidate();
+                            }
+                            SecurityContextHolder.clearContext();
                         }
                     }
                 }