CAS 6.6.0 bug & renew: "Welcome back" message shown only once

[Damien Gibou]

Hello,

We are updating from CAS 6.5.9 to CAS 6.6.0.

We have observed the following regression (reproduced with a minimal overlay):

1 - Go to http://<cas>/cas/login?renew=true and login

2 - Go to http://<cas>/cas/login?renew=true and DO NOT LOGIN

      CAS login-form displays "Welcome back, user. We have detected an existing single sign-on session for you....". That' expected.

3 - Reload http://<cas>/cas/login?renew=true

      CAS login-form doesn't display the expected "Welcome back..." message anymore.

      This used to work properly in CAS 6.5.9.

It seems that at step 3, ${existingSingleSignOnSessionAvailable} is false in fragments/loginform.html. Any clue where to look for the bug ?

Damien