Re: ContextNotActiveException when using Open IdAuthenticationMechanism with notifiyProvider

Hello Benedikt,

from a first glance looks like either a bug in TomEE or your session hasn'=
t been properly authenticated (Access token/ID token failed to verify?)=2E
I'm curious about the rest of your @OpenIdAuthenticationMechanismDefinitio=
n=2E Could you possibly share that? Also, what OIDC provider are you using?

We're running the OIDC authentication at my company with notifyProvider=3D=
true on logout without any issues on Keycloak=2E That's also what I tested =
against during the implementation, so there could of course still be quirks=
 to with other OIDC providers=2E


Thanks
Markus

Am 11=2E M=C3=A4rz 2026 18:07:43 MEZ schrieb Benedikt Lang <benedikt=2Elan=
g@gesi=2Ede>:
>Hello,
>
>I am using TomEE 10=2E1=2E4 to serve a web application=2E For authenticat=
ion I am using the OpenIdAuthenticationMechanisms via `@OpenIdAuthenticatio=
nMechanismDefinition`=2E When using notifyProvider=3Dfalse the logout endpo=
int runs fine, but when setting it to true I receive the following exceptio=
n:
>
>```
>
>jakarta=2Eenterprise=2Econtext=2EContextNotActiveException: WebBeans cont=
ext with scope type annotation @SessionScoped does not exist within current=
 thread
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ewebbeans=2Econtainer=2EBean=
ManagerImpl=2EgetContext(BeanManagerImpl=2Ejava:339)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ewebbeans=2Eintercept=2ENorm=
alScopedBeanInterceptorHandler=2EgetContextualInstance(NormalScopedBeanInte=
rceptorHandler=2Ejava:89)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ewebbeans=2Eintercept=2ESess=
ionScopedBeanInterceptorHandler=2EgetContextualInstance(SessionScopedBeanIn=
terceptorHandler=2Ejava:76)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ewebbeans=2Eintercept=2ENorm=
alScopedBeanInterceptorHandler=2Eget(NormalScopedBeanInterceptorHandler=2Ej=
ava:71)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Etomee=2Esecurity=2Ecdi=2Eop=
enid=2ETomEEOpenIdContext$$OwbNormalScopeProxy0=2EgetIdentityToken(org/apac=
he/tomee/security/cdi/openid/TomEEOpenIdContext=2Ejava)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Etomee=2Esecurity=2Ecdi=2EOp=
enIdAuthenticationMechanism=2EcleanSubject(OpenIdAuthenticationMechanism=2E=
java:87)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Etomee=2Esecurity=2Ecdi=2EOp=
enIdAuthenticationMechanism$$OwbNormalScopeProxy0=2EcleanSubject(org/apache=
/tomee/security/cdi/OpenIdAuthenticationMechanism=2Ejava)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Etomee=2Esecurity=2Ecdi=2EDe=
faultAuthenticationMechanism=2EcleanSubject(DefaultAuthenticationMechanism=
=2Ejava:56)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Etomee=2Esecurity=2Ecdi=2EDe=
faultAuthenticationMechanism$$OwbNormalScopeProxy0=2EcleanSubject(org/apach=
e/tomee/security/cdi/DefaultAuthenticationMechanism=2Ejava)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Etomee=2Esecurity=2Eprovider=
=2ETomEESecurityServerAuthModule=2EcleanSubject(TomEESecurityServerAuthModu=
le=2Ejava:60)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Etomee=2Esecurity=2Eprovider=
=2ETomEESecurityServerAuthContext=2EcleanSubject(TomEESecurityServerAuthCon=
text=2Ejava:37)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Eauthenticator=2E=
AuthenticatorBase=2Elogout(AuthenticatorBase=2Ejava:1238)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Econnector=2ERequ=
est=2Elogout(Request=2Ejava:2527)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Econnector=2ERequ=
estFacade=2Elogout(RequestFacade=2Ejava:764)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at jakarta=2Eservlet=2Ehttp=2EHttpServletRequ=
estWrapper=2Elogout(HttpServletRequestWrapper=2Ejava:302)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Eopenejb=2Eserver=2Ehttpd=2E=
EEFilter$NoCdiRequest=2Elogout(EEFilter=2Ejava:95)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Eopenejb=2Eserver=2Ehttpd=2E=
ServletRequestAdapter=2Elogout(ServletRequestAdapter=2Ejava:92)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at jakarta=2Eservlet=2Ehttp=2EHttpServletRequ=
estWrapper=2Elogout(HttpServletRequestWrapper=2Ejava:302)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Eopenejb=2Erest=2EThreadLoca=
lHttpServletRequest=2Elogout(ThreadLocalHttpServletRequest=2Ejava:398)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at <redacted>=2ELogoutRestAdapter=2Elogout(Lo=
goutRestAdapter=2Ejava:36)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at <redacted>t=2ELogoutRestAdapter$$OwbNormal=
ScopeProxy0=2Elogout(<redacted>/LogoutRestAdapter=2Ejava)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at java=2Ebase/jdk=2Einternal=2Ereflect=2ENat=
iveMethodAccessorImpl=2Einvoke0(Native Method)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at java=2Ebase/jdk=2Einternal=2Ereflect=2ENat=
iveMethodAccessorImpl=2Einvoke(NativeMethodAccessorImpl=2Ejava:77)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at java=2Ebase/jdk=2Einternal=2Ereflect=2EDel=
egatingMethodAccessorImpl=2Einvoke(DelegatingMethodAccessorImpl=2Ejava:43)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at java=2Ebase/java=2Elang=2Ereflect=2EMethod=
=2Einvoke(Method=2Ejava:569)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Eopenejb=2Eserver=2Ecxf=2Ers=
=2EPojoInvoker=2EperformInvocation(PojoInvoker=2Ejava:37)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecxf=2Eservice=2Einvoker=2EA=
bstractInvoker=2Einvoke(AbstractInvoker=2Ejava:96)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecxf=2Ejaxrs=2EJAXRSInvoker=
=2Einvoke(JAXRSInvoker=2Ejava:200)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecxf=2Ejaxrs=2EJAXRSInvoker=
=2Einvoke(JAXRSInvoker=2Ejava:103)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Eopenejb=2Eserver=2Ecxf=2Ers=
=2EAutoJAXRSInvoker=2Einvoke(AutoJAXRSInvoker=2Ejava:68)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecxf=2Einterceptor=2EService=
InvokerInterceptor$1=2Erun(ServiceInvokerInterceptor=2Ejava:59)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecxf=2Einterceptor=2EService=
InvokerInterceptor=2EhandleMessage(ServiceInvokerInterceptor=2Ejava:96)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecxf=2Ephase=2EPhaseIntercep=
torChain=2EdoIntercept(PhaseInterceptorChain=2Ejava:307)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecxf=2Etransport=2EChainInit=
iationObserver=2EonMessage(ChainInitiationObserver=2Ejava:121)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecxf=2Etransport=2Ehttp=2EAb=
stractHTTPDestination=2Einvoke(AbstractHTTPDestination=2Ejava:267)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Eopenejb=2Eserver=2Ecxf=2Ers=
=2ECxfRsHttpListener=2EdoInvoke(CxfRsHttpListener=2Ejava:266)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Etomee=2Ewebservices=2ECXFJA=
XRSFilter=2EdoFilter(CXFJAXRSFilter=2Ejava:80)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Ecore=2EApplicati=
onFilterChain=2EinternalDoFilter(ApplicationFilterChain=2Ejava:162)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Ecore=2EApplicati=
onFilterChain=2EdoFilter(ApplicationFilterChain=2Ejava:138)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Etomcat=2Ewebsocket=2Eserver=
=2EWsFilter=2EdoFilter(WsFilter=2Ejava:51)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Ecore=2EApplicati=
onFilterChain=2EinternalDoFilter(ApplicationFilterChain=2Ejava:162)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Ecore=2EApplicati=
onFilterChain=2EdoFilter(ApplicationFilterChain=2Ejava:138)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Eopenejb=2Eserver=2Ehttpd=2E=
EEFilter=2EdoFilter(EEFilter=2Ejava:67)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Ecore=2EApplicati=
onFilterChain=2EinternalDoFilter(ApplicationFilterChain=2Ejava:162)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Ecore=2EApplicati=
onFilterChain=2EdoFilter(ApplicationFilterChain=2Ejava:138)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at io=2Esmallrye=2Emetrics=2Ejaxrs=2EJaxRsMet=
ricsServletFilter=2EdoFilter(JaxRsMetricsServletFilter=2Ejava:37)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Ecore=2EApplicati=
onFilterChain=2EinternalDoFilter(ApplicationFilterChain=2Ejava:162)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Ecore=2EApplicati=
onFilterChain=2EdoFilter(ApplicationFilterChain=2Ejava:138)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Ecore=2EStandardW=
rapperValve=2Einvoke(StandardWrapperValve=2Ejava:165)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Ecore=2EStandardC=
ontextValve=2Einvoke(StandardContextValve=2Ejava:88)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Etomee=2Ecatalina=2EOpenEJBV=
alve=2Einvoke(OpenEJBValve=2Ejava:45)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Eauthenticator=2E=
AuthenticatorBase=2Einvoke(AuthenticatorBase=2Ejava:607)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Ecore=2EStandardH=
ostValve=2Einvoke(StandardHostValve=2Ejava:113)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Evalves=2EErrorRe=
portValve=2Einvoke(ErrorReportValve=2Ejava:83)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Etomee=2Ecatalina=2EOpenEJBS=
ecurityListener$RequestCapturer=2Einvoke(OpenEJBSecurityListener=2Ejava:97)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Evalves=2EAbstrac=
tAccessLogValve=2Einvoke(AbstractAccessLogValve=2Ejava:654)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Ecore=2EStandardE=
ngineValve=2Einvoke(StandardEngineValve=2Ejava:72)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecatalina=2Econnector=2ECoyo=
teAdapter=2Eservice(CoyoteAdapter=2Ejava:342)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecoyote=2Ehttp11=2EHttp11Pro=
cessor=2Eservice(Http11Processor=2Ejava:399)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecoyote=2EAbstractProcessorL=
ight=2Eprocess(AbstractProcessorLight=2Ejava:63)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Ecoyote=2EAbstractProtocol$C=
onnectionHandler=2Eprocess(AbstractProtocol=2Ejava:903)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Etomcat=2Eutil=2Enet=2ENioEn=
dpoint$SocketProcessor=2EdoRun(NioEndpoint=2Ejava:1775)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Etomcat=2Eutil=2Enet=2ESocke=
tProcessorBase=2Erun(SocketProcessorBase=2Ejava:52)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Etomcat=2Eutil=2Ethreads=2ET=
hreadPoolExecutor=2ErunWorker(ThreadPoolExecutor=2Ejava:973)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Etomcat=2Eutil=2Ethreads=2ET=
hreadPoolExecutor$Worker=2Erun(ThreadPoolExecutor=2Ejava:491)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at org=2Eapache=2Etomcat=2Eutil=2Ethreads=2ET=
askThread$WrappingRunnable=2Erun(TaskThread=2Ejava:63)
>=C2=A0 =C2=A0 =C2=A0 =C2=A0 at java=2Ebase/java=2Elang=2EThread=2Erun(Thr=
ead=2Ejava:840)
>
>```
>
>
>Is this a bug in TomEE? What should I look out for to determine what the =
culprit is?
>
>
>Best regards
>
>Benedikt Lang
>
>