SEC-243: SessionRegistryImpl no longer incorrectly includes expired sessions.
This commit is contained in:
parent
948f79e2e2
commit
5f79a25860
|
@ -70,7 +70,10 @@ public class SessionRegistryImpl implements SessionRegistry,
|
|||
Iterator iter = sessionsUsedByPrincipal.iterator();
|
||||
while (iter.hasNext()) {
|
||||
String sessionId = (String) iter.next();
|
||||
list.add(getSessionInformation(sessionId));
|
||||
SessionInformation sessionInformation = getSessionInformation(sessionId);
|
||||
if (!sessionInformation.isExpired()) {
|
||||
list.add(sessionInformation);
|
||||
}
|
||||
}
|
||||
|
||||
return (SessionInformation[]) list.toArray(new SessionInformation[] {});
|
||||
|
|
Loading…
Reference in New Issue