bug6057: /remove_access_token now generates and returns a new one

This commit is contained in:
Axel Uhl
2024-08-14 15:42:42 +02:00
parent 86dd97ccf1
commit 70bcb001a0
@@ -428,7 +428,8 @@ public class SecurityResource extends AbstractSecurityResource {
final Object principal = SecurityUtils.getSubject().getPrincipal();
if (principal != null) {
final String username = principal.toString();
result = respondToRemoveAccessTokenForUser(username);
getService().removeAccessToken(username);
result = respondWithAccessTokenForAuthenticatedSubject();
} else {
result = Response.status(Status.UNAUTHORIZED).build();
}
@@ -449,13 +450,6 @@ public class SecurityResource extends AbstractSecurityResource {
return Response.ok(streamingOutput(result), MediaType.APPLICATION_JSON_TYPE).build();
}
Response respondToRemoveAccessTokenForUser(final String username) {
final Response result;
getService().removeAccessToken(username);
result = Response.ok().build();
return result;
}
private Response respondWithAccessTokenForAuthenticatedSubject() {
final Response result;
final Object principal = SecurityUtils.getSubject().getPrincipal();