[JBoss-user] [Security JAAS/JBoss] - Re: How to logout a user?
Hi. I have the same problem. I'm trying to code a logout function for my web application. That is, I have a FORM authentication and when I have a user validated, I want to code a logout function. But if I try to make a Session.invalidate() after a user has been validated, it doesn't work, because if I execute the next code: | request.getSession().invalidate(); | System.out.println(The user is authenticated after session.invalidate():); | System.out.println( request.getUserPrincipal()!=null?YES:NO); | the standard output show me YES. Also, I tried a flush of the cache instead a session.invalidate(), but I think this is not the solution for this issue. Thanks in adavance for any kind of comment. View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3875894#3875894 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3875894 --- SF.Net email is sponsored by: Tell us your software development plans! Take this survey and enter to win a one-year sub to SourceForge.net Plus IDC's 2005 look-ahead and a copy of this survey Click here to start! http://www.idcswdc.com/cgi-bin/survey?id=105hix ___ JBoss-user mailing list JBoss-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - Re: How to logout a user?
what do you mean with deleting users from the database? Do I have to delete the proncipals from the subject? If yes is it safe to get the subject using SecurityAssociation.getSubject()? View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3836656#3836656 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3836656 --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149alloc_id=8166op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
[JBoss-user] [Security JAAS/JBoss] - Re: How to logout a user?
Are you using FORM or BASIC web authentication? Session.invalidate() only works with FORM login. When deleting users from the database, you'll need to flush the authentication cache. Search the forum for details on that. View the original post : http://www.jboss.org/index.html?module=bbop=viewtopicp=3836224#3836224 Reply to the post : http://www.jboss.org/index.html?module=bbop=postingmode=replyp=3836224 --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149alloc_id=8166op=click ___ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
