{"action":"closed","issue":{"url":"https://api.github.com/repos/payara/Payara/issues/744","repository_url":"https://api.github.com/repos/payara/Payara","labels_url":"https://api.github.com/repos/payara/Payara/issues/744/labels{/name}","comments_url":"https://api.github.com/repos/payara/Payara/issues/744/comments","events_url":"https://api.github.com/repos/payara/Payara/issues/744/events","html_url":"https://github.com/payara/Payara/issues/744","id":146443192,"number":744,"title":"Users not logged out when used SSO","user":{"login":"dmatej","id":302904,"avatar_url":"https://avatars.githubusercontent.com/u/302904?v=3","gravatar_id":"","url":"https://api.github.com/users/dmatej","html_url":"https://github.com/dmatej","followers_url":"https://api.github.com/users/dmatej/followers","following_url":"https://api.github.com/users/dmatej/following{/other_user}","gists_url":"https://api.github.com/users/dmatej/gists{/gist_id}","starred_url":"https://api.github.com/users/dmatej/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dmatej/subscriptions","organizations_url":"https://api.github.com/users/dmatej/orgs","repos_url":"https://api.github.com/users/dmatej/repos","events_url":"https://api.github.com/users/dmatej/events{/privacy}","received_events_url":"https://api.github.com/users/dmatej/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/payara/Payara/labels/1:Wait","name":"1:Wait","color":"c2e0c6"},{"url":"https://api.github.com/repos/payara/Payara/labels/c:Task","name":"c:Task","color":"bfd4f2"},{"url":"https://api.github.com/repos/payara/Payara/labels/cannot%20reproduce","name":"cannot reproduce","color":"006b75"}],"state":"closed","locked":false,"assignee":{"login":"mikecroft","id":4458026,"avatar_url":"https://avatars.githubusercontent.com/u/4458026?v=3","gravatar_id":"","url":"https://api.github.com/users/mikecroft","html_url":"https://github.com/mikecroft","followers_url":"https://api.github.com/users/mikecroft/followers","following_url":"https://api.github.com/users/mikecroft/following{/other_user}","gists_url":"https://api.github.com/users/mikecroft/gists{/gist_id}","starred_url":"https://api.github.com/users/mikecroft/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikecroft/subscriptions","organizations_url":"https://api.github.com/users/mikecroft/orgs","repos_url":"https://api.github.com/users/mikecroft/repos","events_url":"https://api.github.com/users/mikecroft/events{/privacy}","received_events_url":"https://api.github.com/users/mikecroft/received_events","type":"User","site_admin":false},"assignees":[{"login":"mikecroft","id":4458026,"avatar_url":"https://avatars.githubusercontent.com/u/4458026?v=3","gravatar_id":"","url":"https://api.github.com/users/mikecroft","html_url":"https://github.com/mikecroft","followers_url":"https://api.github.com/users/mikecroft/followers","following_url":"https://api.github.com/users/mikecroft/following{/other_user}","gists_url":"https://api.github.com/users/mikecroft/gists{/gist_id}","starred_url":"https://api.github.com/users/mikecroft/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikecroft/subscriptions","organizations_url":"https://api.github.com/users/mikecroft/orgs","repos_url":"https://api.github.com/users/mikecroft/repos","events_url":"https://api.github.com/users/mikecroft/events{/privacy}","received_events_url":"https://api.github.com/users/mikecroft/received_events","type":"User","site_admin":false}],"milestone":null,"comments":8,"created_at":"2016-04-06T21:37:10Z","updated_at":"2016-09-23T23:03:38Z","closed_at":"2016-09-23T23:03:37Z","body":"It can be simulated even in single instance. We have an ear with many war files, SSO turned on. User is logged in, works with one module in one Firefox tab. Then opens another tab and browses to another module. Then logs out in the first tab - it seems everything is alright, but he can still work in the second tab. \r\n\r\nI have turned the monitoring on Web Container - I use only one user and two tabs in one browser window, but now I got 38 sessions open and only 5 invalidated.\r\n\r\nI have also enabled logging on javax.enterprise.web (FINEST), but it is also buggy (placeholders are not replaced by values) and suprisingly I got also NPE. It seems the SSO entries are not removed ...? But I don't see why?\r\n\r\nThe class is GlassFishSingleSignOn ... the NPE is really not a cause of the problem, but it's \r\n`[2016-04-06T23:01:56.257+0200] [Payara 4.1] [SEVERE] [AS-WEB-CORE-00037] [javax.enterprise.web.core] [tid: _ThreadID=26 _ThreadName=http-listener-1(2)] [timeMillis: 1459976516257] [levelValue: 1000] [[\r\n  An exception or error occurred in the container during the request processing\r\njava.lang.NullPointerException\r\n        at com.sun.enterprise.security.web.GlassFishSingleSignOn.invoke(GlassFishSingleSignOn.java:488)\r\n        at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:702)\r\n        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:673)\r\n        at org.apache.catalina.connector.CoyoteAdapter.doService(CoyoteAdapter.java:413)\r\n        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:283)\r\n        at com.sun.enterprise.v3.services.impl.ContainerMapper$HttpHandlerCallable.call(ContainerMapper.java:459)\r\n        at com.sun.enterprise.v3.services.impl.ContainerMapper.service(ContainerMapper.java:167)\r\n        at org.glassfish.grizzly.http.server.HttpHandler.runService(HttpHandler.java:206)\r\n        at org.glassfish.grizzly.http.server.HttpHandler.doHandle(HttpHandler.java:180)\r\n        at org.glassfish.grizzly.http.server.HttpServerFilter.handleRead(HttpServerFilter.java:235)\r\n        at org.glassfish.grizzly.filterchain.ExecutorResolver$9.execute(ExecutorResolver.java:119)\r\n        at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeFilter(DefaultFilterChain.java:283)\r\n        at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeChainPart(DefaultFilterChain.java:200)\r\n        at org.glassfish.grizzly.filterchain.DefaultFilterChain.execute(DefaultFilterChain.java:132)\r\n        at org.glassfish.grizzly.filterchain.DefaultFilterChain.process(DefaultFilterChain.java:111)\r\n        at org.glassfish.grizzly.ProcessorExecutor.execute(ProcessorExecutor.java:77)\r\n        at org.glassfish.grizzly.nio.transport.TCPNIOTransport.fireIOEvent(TCPNIOTransport.java:536)\r\n        at org.glassfish.grizzly.strategies.AbstractIOStrategy.fireIOEvent(AbstractIOStrategy.java:112)\r\n        at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy.run0(WorkerThreadIOStrategy.java:117)\r\n        at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy.access$100(WorkerThreadIOStrategy.java:56)\r\n        at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy$WorkerThreadRunnable.run(WorkerThreadIOStrategy.java:137)\r\n        at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:591)\r\n        at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.run(AbstractThreadPool.java:571)\r\n        at java.lang.Thread.run(Thread.java:745)\r\n`\r\n\r\n"}}
{"actor":{"display_login":"mikecroft"}}