Why does flushOnSessionInvalidation not flush the JAAS cache when sessions timeout on JBoss?
Issue
- Why does flushOnSessionInvalidation not flush the JAAS cache when sessions timeout on JBoss?
-
We have configured our application to flush the JAAS cache using the following in our jboss-web.xml:
<security-domain flushOnSessionInvalidation="true">java:/jaas/test-sec-domain</security-domain> -
Calling session.invalidate() results in the JAAS cache getting flushed for the user. However, the JAAS cache is not flushed when the session times out.
Environment
- JBoss Enterprise Application Platform (EAP)
- 5.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
