Good find - I just confirmed it.
To be clear this is what I'm seeing.
- Login as demo - book a couple of hotels.
- Use the back button (either many times, or logout, login again and then back button) to get back to the login page.
- Login as gavin
- the booked hotels for demo are still showing
As an extra note any active workspaces for
demoare cleared out - such as multiple unfinished bookings. Only the booked hotels are still being seen.
This is mostly just a bug in the example, and not in seam itself, but either way thanks for letting us know.
Have you put a jira in?
Not to be pessimistic, but are you sure that this isn't a sign of a larger problem with Seam, that the session is never being invalidated, so all session-scoped components are still alive?
I not worried that the session will never be invalidated, it will be cleaned up like any other session.
I believe this is an application issue with the booking example managed its contexts and how it handles login conversations. I have not a chance to look deeper through.
Do you have any specific concerns, or more information?
What version of Seam is this? I attempted this using trunk and was not able to reproduce the problem.
I verified with 2.0.3.CR1
Actually, the relogin isn't really happening. The faces message being displayed is bad. This issue only affects 2.0. See the notes on the JIRA issue for more detail.