[
https://issues.apache.org/jira/browse/FELIX-3006?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14328657#comment-14328657
]
Valentin Valchev commented on FELIX-3006:
-----------------------------------------
When you open /system/console/logout here what happens:
1. webconsole performs logout and request the browser to authenticate
2. the browser opens username/password dialog and asks the user to enter his
credentials
3. then the browser sends a new request with basic authentication included to
/system/console/logout
4.the the web console performs logout (step #1).. and this is an endless cycle
In order to prevent the endless cycle, in step #4, the webconsole will redirect
the user to the default plugin. To differentiate between step #1 and step #4, I
use a session attribute. It is not available in step #1 and available in step
#4. I couldn't figure it out how to fix the issue above, without a session.
> Please create a logout button for the web console screen
> --------------------------------------------------------
>
> Key: FELIX-3006
> URL: https://issues.apache.org/jira/browse/FELIX-3006
> Project: Felix
> Issue Type: Improvement
> Components: Web Console
> Reporter: Susan Javurek
> Attachments: FELIX-3006.diff, logout.diff
>
>
> Please add a log out button on the web console to avoid sessions and cookies
> being retained.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
