JENKINS-52306 Improve SSO logout, continuous fix for JENKINS-11507

jenkinsci · Jul 2, 2018 · af1b2d7 · af1b2d7
1 parent a04f9a9
commit af1b2d7
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/src/main/java/de/theit/jenkins/crowd/CrowdServletFilter.java b/src/main/java/de/theit/jenkins/crowd/CrowdServletFilter.java
@@ -182,6 +182,15 @@ public void doFilter(ServletRequest request, ServletResponse response,
 								LOG.fine("User sucessfully logged in");
 							}
 							sc.setAuthentication(auth);
+						} else { // Auto login failed.
+							if (LOG.isLoggable(Level.FINE)) {
+								LOG.fine("User failed to log in");
+							}
+							HttpSession session = req.getSession(false);
+							if (session != null) {
+								session.invalidate();
+							}
+							SecurityContextHolder.clearContext();
 						}
 					}
 				}