[
https://issues.apache.org/jira/browse/ISIS-299?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dan Haywood updated ISIS-299:
-----------------------------
Description:
Currently the wicket viewer's logout button merely invalidates the wicket
session, but does not invalidate the shiro session because there is no API to
do so.
This ticket is to provide API for this, and implement in both shiro and wicket.
Should explore the 55minutes' ShiroWicketPlugin to see how it works...
was:
Currently the wicket viewer's logout button merely invalidates the wicket
session, but does not invalidate the shiro session because there is no API to
do so.
This ticket is to provide API for this, and implement in both shiro and wicket.
> Extend the authentication API so that can explicitly logout session.
> --------------------------------------------------------------------
>
> Key: ISIS-299
> URL: https://issues.apache.org/jira/browse/ISIS-299
> Project: Isis
> Issue Type: Improvement
> Components: Core, Security: Shiro, Viewer: Wicket
> Affects Versions: viewer-wicket-1.0.0, security-shiro-1.0.0, core-1.0.0
> Reporter: Dan Haywood
> Assignee: Dan Haywood
> Fix For: viewer-wicket-1.4.0, security-shiro-1.4.0, core-1.4.0
>
>
> Currently the wicket viewer's logout button merely invalidates the wicket
> session, but does not invalidate the shiro session because there is no API to
> do so.
> This ticket is to provide API for this, and implement in both shiro and
> wicket.
> Should explore the 55minutes' ShiroWicketPlugin to see how it works...
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
