You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/modules/ROOT/pages/servlet/oauth2/login/logout.adoc
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -242,7 +242,7 @@ This means that it will only terminate sessions whose Client matches the `aud` c
242
242
One notable part of this architecture's implementation is that it propagates the incoming back-channel request internally for each corresponding session.
243
243
Initially, this may seem unnecessary.
244
244
However, recall that the Servlet API does not give direct access to the `HttpSession` store.
245
-
By making an internal logout call, the corresponding session can now be validated.
245
+
By making an internal logout call, the corresponding session can now be invalidated.
246
246
247
247
Additionally, forging a logout call internally allows for each set of ``LogoutHandler``s to be run against that session and corresponding `SecurityContext`.
0 commit comments