OpenConext / OpenConext-myconext

A (guest) IdP for OpenConext
https://eduid.nl/
4 stars 8 forks source link

Wrong email link should also destroy session #597

Open phavekes opened 1 week ago

phavekes commented 1 week ago

This issue is imported from pivotal

As a user, if I click the \'Whoops wrong email\' link, the session which has been created for that email address must be destroyed. Not sure if this is already the case.
phavekes commented 1 week ago

For now decided not to implement as there are - theoretical - scenario\'s where this can conflict with valid logins. (Okke Harsta - Mar 12, 2020)