AJAX call and shibstate cookie accumulation.

Cantor, Scott cantor.2 at osu.edu
Fri May 4 18:54:41 BST 2012


On 5/4/12 1:46 PM, "Koorosh Vakhshoori" <kvakhshoori at gmail.com> wrote:
>
>Now our solution is to first catch the session time out in JavaScript
>and delete all _shibstate_xxx cookies by setting their expiration date
>into past and redirect user to the login page. Any comments or
>suggestions?

https://issues.shibboleth.net/jira/browse/SSPCPP-444

You can also stop using cookies for relay state, and it is no longer the
default.

-- Scott




More information about the users mailing list