SEC-359: Logout even if not logged in.
This commit is contained in:
parent
fa6b4480b1
commit
5911234f65
|
@ -94,10 +94,8 @@ public class LogoutFilter implements Filter {
|
|||
logger.debug("Logging out user '" + auth + "' and redirecting to logout page");
|
||||
}
|
||||
|
||||
if (auth != null) {
|
||||
for (int i = 0; i < handlers.length; i++) {
|
||||
handlers[i].logout(httpRequest, httpResponse, auth);
|
||||
}
|
||||
for (int i = 0; i < handlers.length; i++) {
|
||||
handlers[i].logout(httpRequest, httpResponse, auth);
|
||||
}
|
||||
|
||||
sendRedirect(httpRequest, httpResponse, logoutSuccessUrl);
|
||||
|
|
Loading…
Reference in New Issue