I dislike this patch a bit, because if you are on a page which is publicly accessible, it loads that page, instead of redirecting to the login form.

In my head the following should have worked:

	public function showLoginForm(string $user = null, string $redirect_url = null): Http\Response {
		if ($this->session->exists('clearingExecutionContexts')) {
			$this->session->remove('clearingExecutionContexts');

			$response = new RedirectResponse($this->urlGenerator->linkToRouteAbsolute('core.login.showLoginForm'));
			$response->addHeader('Clear-Site-Data', '"cache", "storage", "executionContexts"');
			return $response;
		}

But while your request is on /login firefox reloads the last loaded page, which is still the previous page, so it also would reload the public call.

Do you have a logout button on a public page?

Well on Talk the same URL is used for a room independent of your login state.

@rullzer @nickvergessen What is the status here? Continue it or close it?

Let me have another look. I might have a more elegant way

@nickvergessen can you verify that this seems fixed with the latest firefox?

No, it is still the same with ff 65.

Same here, still broken with FF 65.0

Ok this is now a bit more elegant I think.

@nickvergessen please check it out

Backport?

Fine by me. It is mainly an added middleware. So should not cause issues.

/backport to stable15

The backport to stable15 failed. Please do this backport manually.