iwayvietnam / zm-sso

Zm SSO is the Zimbra Collaboration Open Source Edition extension for single sign-on authentication to the Zimbra Web Client.
GNU Affero General Public License v3.0
14 stars 20 forks source link

back-channel log-out using zimbraAuthTokenValidityValue will not work reliable #3

Open barrydegraaff opened 2 years ago

barrydegraaff commented 2 years ago

From experience I can say that changing the zimbraAuthTokenValidityValue as seen in: https://github.com/iwayvietnam/zm-sso/blob/master/src/main/java/com/iwayvietnam/zmsso/pac4j/ZmLogoutHandler.java#L158

Will not reliably work to end a user session. Relates to https://github.com/iwayvietnam/zm-sso/issues/2 also.