portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Santiago Gala PĆ©rez <sg...@hisitech.com>
Subject Re: why Session is invalidated when user logs in
Date Fri, 10 Oct 2003 09:45:23 GMT

El jueves, 9 octu, 2003, a las 20:52 Europe/Madrid, Glenn R. Golden 
escribiĆ³:

> This is standard Turbine behavior, I believe.  See the turbine 
> servlet, that's where I think it quite deliberately clears all session 
> values once the user successfully logs in.
>


This is because of security concerns, to avoid information gathered 
under a security context being propagated to a different one on 
login/logout, I think.


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-dev-help@jakarta.apache.org


Mime
View raw message