core-geonetwork
core-geonetwork copied to clipboard
Fix issue with oidc invalid session by adding session filter
- Add session filter for OIDC to detect invalidated session from OIDC provider such as Keycloak, and end the http session in spring
- Modify the condition in GeonetworkOidcPreAuthActionsLoginFilter.java to redirect the user to re-authentication if there session does not exists
Checklist
- [ ✔️] I have read the contribution guidelines
- [✔️ ] Pull request provided for
mainbranch, backports managed with label - [ ] Good housekeeping of code, cleaning up comments, tests, and documentation
- [ ] Clean commit history broken into understandable chucks, avoiding big commits with hundreds of files, cautious of reformatting and whitespace changes
- [ ] Clean commit messages, longer verbose messages are encouraged
- [ ] API Changes are identified in commit messages
- [ ] Testing provided for features or enhancements using automatic tests
- [ ] User documentation provided for new features or enhancements in manual
- [ ] Build documentation provided for development instructions in
README.mdfiles - [ ] Library management using
pom.xmldependency management. Update build documentation with intended library use and library tutorials or documentation