SEC-243: SessionRegistryImpl no longer incorrectly includes expired sessions.
This commit is contained in:
parent
948f79e2e2
commit
5f79a25860
|
@ -70,7 +70,10 @@ public class SessionRegistryImpl implements SessionRegistry,
|
||||||
Iterator iter = sessionsUsedByPrincipal.iterator();
|
Iterator iter = sessionsUsedByPrincipal.iterator();
|
||||||
while (iter.hasNext()) {
|
while (iter.hasNext()) {
|
||||||
String sessionId = (String) iter.next();
|
String sessionId = (String) iter.next();
|
||||||
list.add(getSessionInformation(sessionId));
|
SessionInformation sessionInformation = getSessionInformation(sessionId);
|
||||||
|
if (!sessionInformation.isExpired()) {
|
||||||
|
list.add(sessionInformation);
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
return (SessionInformation[]) list.toArray(new SessionInformation[] {});
|
return (SessionInformation[]) list.toArray(new SessionInformation[] {});
|
||||||
|
|
Loading…
Reference in New Issue