Not to remove ALOR cookie during passive auth flow.
@@ -336,7 +336,6 @@ public class DefaultRequestCoordinator extends AbstractRequestCoordinator implem
}
} finally {
UserCoreUtil.setDomainInThreadLocal(null);
- FrameworkUtils.removeALORCookie(request, response);
if (context != null) {
// Mark this context left the thread. Now another thread can use this context.
context.setActiveInAThread(false);
@@ -353,6 +352,10 @@ public class DefaultRequestCoordinator extends AbstractRequestCoordinator implem
log.debug("Context with id: " + context.getContextIdentifier() + " added to the cache.");
}
}
+ // Clear the auto login related cookies only during passive authentication flow.
+ if (!context.isPassiveAuthenticate()) {
+ FrameworkUtils.removeALORCookie(request, response);
+ }
}
unwrapResponse(responseWrapper, sessionDataKey, response, context);
}
