Bug 777617 (SOA-126)

Summary:	Standalone ESB server - need to add a logout to the single sign-on
Product:	[JBoss] JBoss Enterprise SOA Platform 4	Reporter:	Len DiMaggio <ldimaggi>
Component:	Tooling	Assignee:	Mike Brock <cbrock>
Status:	CLOSED DEFERRED	QA Contact:
Severity:	high	Docs Contact:
Priority:	high
Version:	4.2 IR5	CC:	rruss
Target Milestone:	---
Target Release:	4.2 IR6
Hardware:	Unspecified
OS:	Unspecified
URL:	http://jira.jboss.org/jira/browse/SOA-126
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:	IR5 standalone ESB server
Last Closed:	2007-11-17 01:46:11 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Len DiMaggio 2007-11-09 21:37:30 UTC

Date of First Response: 2007-11-16 20:45:59
project_key: SOA

Without a logout option - users will stay logged in - until browser is closed - probably a security hole

Comment 1 Mike Brock 2007-11-17 01:45:59 UTC

The sessions expire after 10 minutes of activity, and the new method now opens the consoles into a separate browser window.  I'm going to close this for now, because closing the window is sufficient to terminate the session as session cookies are invalidated by the browser upon exit.