Session invalidation is done after the custom error handling

[controller.git] / opendaylight / web / flows / src / main / resources / WEB-INF / jsp / autherror.jsp

diff --git a/opendaylight/web/flows/src/main/resources/WEB-INF/jsp/autherror.jsp b/opendaylight/web/flows/src/main/resources/WEB-INF/jsp/autherror.jsp
index ef42d286eb712c1c6f97a87157acf438557e512e..127a5a09dd596158ea8e31f1318913caacd711d1 100644 (file)
--- a/opendaylight/web/flows/src/main/resources/WEB-INF/jsp/autherror.jsp
+++ b/opendaylight/web/flows/src/main/resources/WEB-INF/jsp/autherror.jsp
@@ -15,7 +15,6 @@
 
 <c:set var="title" value="OpenDaylight login error" scope="application"/>
 <%
-       if (session != null) session.invalidate();
     String filePath = "/WEB-INF/jsp/customerror.jsp"; 
        URL fileURL = pageContext.getServletContext().getResource(filePath);
        if(fileURL!=null) {
@@ -51,5 +50,6 @@
     </div>
   </div> 
   </form>
+  <% if (session != null) session.invalidate(); %>  
 </body>
 </html>