On Nov 12, 2013, at 4:04 PM, Shanti Suresh <sha...@umich.edu> wrote:

> Greetings,
> 
> 
> I have Apache HTTPD running mod_cosign protecting some Tomcat URIs in a 
> vendor application.  Not all URIs are protected; only certain ones.  HTTPD 
> basically sends everything over to Tomcat.
> 
> I have written a logout.jsp which will expire the browser's Cosign cookies 
> and redirect to Weblogin's logout page.
> 
> My question is:
> how do I paint a "Logout" button in only the protected URIs before the pages 
> get served to the user?   The un-protected Tomcat URIs do not need a "Logout" 
> button.
> 
> (1) Since HTTPD knows what it is protecting, one idea would be to somehow 
> have HTTPD "overlay" a Logout link that calls logout.jsp.  

This should be possible using mod_substitute:

        <http://httpd.apache.org/docs/2.2/mod/mod_substitute.html>

andrew

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

------------------------------------------------------------------------------
DreamFactory - Open Source REST & JSON Services for HTML5 & Native Apps
OAuth, Users, Roles, SQL, NoSQL, BLOB Storage and External API Access
Free app hosting. Or install the open source package on any LAMP server.
Sign up and see examples for AngularJS, jQuery, Sencha Touch and Native!
http://pubads.g.doubleclick.net/gampad/clk?id=63469471&iu=/4140/ostg.clktrk
_______________________________________________
Cosign-discuss mailing list
Cosign-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/cosign-discuss

Reply via email to