浏览代码

Remove cached DiscoveryInformation from session in OpenID4JavaConsumer's endConsumption method.

Luke Taylor 15 年之前
父节点
当前提交
f5468087c2
共有 1 个文件被更改,包括 1 次插入0 次删除
  1. 1 0
      openid/src/main/java/org/springframework/security/openid/OpenID4JavaConsumer.java

+ 1 - 0
openid/src/main/java/org/springframework/security/openid/OpenID4JavaConsumer.java

@@ -113,6 +113,7 @@ public class OpenID4JavaConsumer implements OpenIDConsumer {
 
         // retrieve the previously stored discovery information
         DiscoveryInformation discovered = (DiscoveryInformation) request.getSession().getAttribute(DISCOVERY_INFO_KEY);
+        request.getSession().removeAttribute(DISCOVERY_INFO_KEY);
 
         // extract the receiving URL from the HTTP request
         StringBuffer receivingURL = request.getRequestURL();