ahgittin edited a comment on issue #1032: make /logout just log out URL: https://github.com/apache/brooklyn-server/pull/1032#issuecomment-458368531 mostly fixes problem at #1033 and makes it nicer to work with from the uI, including invalidating locally-stored creds still to do: * push the corresponding logout UI fixes * figure out whether the `Authorization` header being kept on the looping `/extended` call can be made to be dropped after the first call, so it doesn't cache the login, and confirm this means when you've logged out you are properly logged out * determine what code is creating a session when the user isn't authenticated * check if time-based invalidation (without manual cache deletion) causes the server to crash * invoke security provider's logout method
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org With regards, Apache Git Services
