Browse Source

Remove cached DiscoveryInformation from session in OpenID4JavaConsumer's endConsumption method.

Luke Taylor 15 years ago
parent
commit
f5468087c2

+ 1 - 0
openid/src/main/java/org/springframework/security/openid/OpenID4JavaConsumer.java

@@ -113,6 +113,7 @@ public class OpenID4JavaConsumer implements OpenIDConsumer {
 
         // retrieve the previously stored discovery information
         DiscoveryInformation discovered = (DiscoveryInformation) request.getSession().getAttribute(DISCOVERY_INFO_KEY);
+        request.getSession().removeAttribute(DISCOVERY_INFO_KEY);
 
         // extract the receiving URL from the HTTP request
         StringBuffer receivingURL = request.getRequestURL();