User induced session stomping?

[Cantor, Scott]

On 8/27/12 1:56 PM, "Christopher Bongaarts" <cab at umn.edu> wrote:
>>
>> So I'm seeing 'No login context' found via back-button resulting in
>>messages
>> coming from HttpServletHelper, this is something I trap for at jsp, as
>>well as
>> no login context coming from the AuthenticationEngine.
>
>It would be helpful to have a list or example of the different
>conditions if it could be used to tailor the error messages to users.
>(Maybe samples from people who have done it?)

With the understanding that they aren't a public interface in the IdP, I
have a TODO that's about a year old to document my error handling
customizations (this issue and other things I did). So yes, just haven't
had a chance.

Would be interested in Kevin's also.

-- Scott