[
https://issues.apache.org/jira/browse/ISIS-299?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Daniel Keir Haywood updated ISIS-299:
-------------------------------------
Summary: Document the logout action. (Was: Extend the authentication API
so that can explicitly logout session.) (was: Extend the authentication API so
that can explicitly logout session.)
> Document the logout action. (Was: Extend the authentication API so that can
> explicitly logout session.)
> --------------------------------------------------------------------------------------------------------
>
> Key: ISIS-299
> URL: https://issues.apache.org/jira/browse/ISIS-299
> Project: Isis
> Issue Type: Improvement
> Components: Isis Core
> Affects Versions: viewer-wicket-1.0.0, security-shiro-1.0.0, core-1.0.0
> Reporter: Daniel Keir Haywood
> Assignee: Daniel Keir Haywood
> Priority: Major
> Fix For: 2.0.0-M6
>
>
> Andi addressed this in M5, but it isn't documented yet.
> At any rate, we now have an actual action that will logout the session; this
> is our formal API.
>
> ~~~~~~~~
> Currently the wicket viewer's logout button merely invalidates the wicket
> session, but does not invalidate the shiro session because there is no API to
> do so.
> This ticket is to provide API for this, and implement in both shiro and
> wicket.
> Should explore the 55minutes' ShiroWicketPlugin to see how it works...
--
This message was sent by Atlassian Jira
(v8.3.4#803005)