[
https://issues.apache.org/jira/browse/ISIS-299?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Daniel Keir Haywood updated ISIS-299:
-------------------------------------
Component/s: (was: Isis Viewer Wicket)
(was: Isis Core)
Affects Version/s: 2.1.0
> Extend the authentication API so that can explicitly logout session.
> --------------------------------------------------------------------
>
> Key: ISIS-299
> URL: https://issues.apache.org/jira/browse/ISIS-299
> Project: Isis
> Issue Type: Improvement
> Components: Isis Security Shiro
> Affects Versions: viewer-wicket-1.0.0, security-shiro-1.0.0, core-1.0.0,
> 2.1.0
> Reporter: Daniel Keir Haywood
> Priority: Major
> Fix For: 2.12.0
>
>
> Currently the wicket viewer's logout button merely invalidates the wicket
> session, but does not invalidate the shiro session because there is no API to
> do so.
> This ticket is to provide API for this, and implement in both shiro and
> wicket.
> Should explore the 55minutes' ShiroWicketPlugin to see how it works...
--
This message was sent by Atlassian Jira
(v8.3.4#803005)