Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | [Security] Use LogoutException for invalid CSRF token in LogoutListener | Jeremy Mikola | 2012-02-14 | 1 | -0/+25 |
On the advice of @schmittjoh, this commit adds a LogoutException class for use by LogoutListener if the CSRF token is invalid. The handling in the Security component's ExceptionListener is modeled after AccessDeniedException, which gets wrapped in an AccessDeniedHttpException in the absence of handler service or error page (I didn't think it was appropriate to re-use those for LogoutException). |