weblogic Caches userPrincipal
We have a weblogic server integrated with OAM, there is OAM ID Asserter , iPlanet Authenticator
The web.xml has the below to allow injecting the username in the request
<login-config>
<auth-method>CLIENT-CERT</auth-method>
</login-config>
The problem is, When the user logs out using the oam logout page, and login with a different user, request.getUserPrincipal and request.getRemoteUser is returning the first username, not the new one.. manually deleting JSESSION cookie would reset the username on those,
From the logs, I can see that OAM is sending the correct username, so I see correct OAM_REMOTE_USER in the logs, but only request.getUserPrincipal and request.getRemoteUser are sending wrong values