[ https://issues.apache.org/jira/browse/WICKET-6668?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Martin Grigorov updated WICKET-6668: ------------------------------------ Affects Version/s: (was: 7.14.0) 7.13.0 > Sign out the existing session if a sign in attempt has failed > ------------------------------------------------------------- > > Key: WICKET-6668 > URL: https://issues.apache.org/jira/browse/WICKET-6668 > Project: Wicket > Issue Type: Improvement > Components: wicket-auth-roles > Affects Versions: 8.4.0, 7.13.0, 9.0.0-M2 > Reporter: Martin Grigorov > Assignee: Martin Grigorov > Priority: Minor > Fix For: 8.5.0, 9.0.0-M2, 7.14.0 > > > If a user is already authenticated but still (s)he goes to the login page and > tries to sign in again with invalid credentials Wicket does not fail the > attempt but continues successfully. > The correct behavior would be to report the signIn failure with error > feedback message and to sign out the already authenticated user. -- This message was sent by Atlassian JIRA (v7.6.3#76005)