X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=server%2Fruntime%2Forg.argeo.server.jackrabbit%2Fsrc%2Fmain%2Fjava%2Forg%2Fargeo%2Fjackrabbit%2Fremote%2FScopedSessionProvider.java;h=ffe6df9b1c1dfb853dd385d30eee5b83f4571c16;hb=11dcf593dee796336eaa3f7063c6b36595d31aa6;hp=c3bcc01a722e0f470b59523f2a729e887a6e4f12;hpb=cd50e3711d3b86921f11d9e021fc6a43bef0d400;p=lgpl%2Fargeo-commons.git diff --git a/server/runtime/org.argeo.server.jackrabbit/src/main/java/org/argeo/jackrabbit/remote/ScopedSessionProvider.java b/server/runtime/org.argeo.server.jackrabbit/src/main/java/org/argeo/jackrabbit/remote/ScopedSessionProvider.java index c3bcc01a7..ffe6df9b1 100644 --- a/server/runtime/org.argeo.server.jackrabbit/src/main/java/org/argeo/jackrabbit/remote/ScopedSessionProvider.java +++ b/server/runtime/org.argeo.server.jackrabbit/src/main/java/org/argeo/jackrabbit/remote/ScopedSessionProvider.java @@ -109,10 +109,12 @@ public class ScopedSessionProvider implements SessionProvider, Serializable { if (jcrSession == null) try { Session session = login(rep, workspace); - if (!session.getUserID().equals(springUser)) + if (!session.getUserID().equals(springUser)) { + JcrUtils.logoutQuietly(session); throw new ArgeoException("Spring Security user '" + springUser + "' not in line with JCR user '" + session.getUserID() + "'"); + } currentRepositoryName = requestJcrRepository; // do not use workspace variable which may be null currentWorkspaceName = session.getWorkspace().getName();