From 06b691211585fbe4049099b15fffb4cdc42cb728 Mon Sep 17 00:00:00 2001 From: James Moger <james.moger@gitblit.com> Date: Mon, 17 Jun 2013 15:59:47 -0400 Subject: [PATCH] Do not set cookies for sessions authenticated via certificate or container --- src/main/java/com/gitblit/GitBlit.java | 5 ++++- 1 files changed, 4 insertions(+), 1 deletions(-) diff --git a/src/main/java/com/gitblit/GitBlit.java b/src/main/java/com/gitblit/GitBlit.java index ef73978..ecd4662 100644 --- a/src/main/java/com/gitblit/GitBlit.java +++ b/src/main/java/com/gitblit/GitBlit.java @@ -929,7 +929,10 @@ if (userService == null) { return; } - if (userService.supportsCookies()) { + GitBlitWebSession session = GitBlitWebSession.get(); + boolean standardLogin = session.authenticationType.isStandard(); + + if (userService.supportsCookies() && standardLogin) { Cookie userCookie; if (user == null) { // clear cookie for logout -- Gitblit v1.9.1