Skip to content

Commit 19a5a9c

Browse files
Juha-1jzheaux
authored andcommitted
Update logout.adoc
typos Signed-off-by: Juha-1 <[email protected]>
1 parent 47630ca commit 19a5a9c

File tree

1 file changed

+2
-2
lines changed
  • docs/modules/ROOT/pages/servlet/oauth2/login

1 file changed

+2
-2
lines changed

docs/modules/ROOT/pages/servlet/oauth2/login/logout.adoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -242,7 +242,7 @@ This means that it will only terminate sessions whose Client matches the `aud` c
242242
One notable part of this architecture's implementation is that it propagates the incoming back-channel request internally for each corresponding session.
243243
Initially, this may seem unnecessary.
244244
However, recall that the Servlet API does not give direct access to the `HttpSession` store.
245-
By making an internal logout call, the corresponding session can now be validated.
245+
By making an internal logout call, the corresponding session can now be invalidated.
246246

247247
Additionally, forging a logout call internally allows for each set of ``LogoutHandler``s to be run against that session and corresponding `SecurityContext`.
248248

@@ -299,7 +299,7 @@ Java::
299299
[source=java,role="primary"]
300300
----
301301
@Bean
302-
OidcBackChannelLogoutHandler oidcLogoutHandler(OidcSessionRegistry sessionRegistry) {
302+
OidcBackChannelLogoutHandler oidcLogoutHandler(OidcSessionRegistry oidcSessionRegistry) {
303303
OidcBackChannelLogoutHandler logoutHandler = new OidcBackChannelLogoutHandler(oidcSessionRegistry);
304304
logoutHandler.setSessionCookieName("SESSION");
305305
return logoutHandler;

0 commit comments

Comments
 (0)