[
https://issues.apache.org/jira/browse/ISIS-299?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Daniel Keir Haywood updated ISIS-299:
-------------------------------------
Description:
Andi addressed this in M5, but it isn't documented yet.
At any rate, we now have an actual action that will logout the session; this is
our formal API.
~~~~~~~~
Currently the wicket viewer's logout button merely invalidates the wicket
session, but does not invalidate the shiro session because there is no API to
do so.
This ticket is to provide API for this, and implement in both shiro and wicket.
Should explore the 55minutes' ShiroWicketPlugin to see how it works...
was:
Currently the wicket viewer's logout button merely invalidates the wicket
session, but does not invalidate the shiro session because there is no API to
do so.
This ticket is to provide API for this, and implement in both shiro and wicket.
Should explore the 55minutes' ShiroWicketPlugin to see how it works...
> Extend the authentication API so that can explicitly logout session.
> --------------------------------------------------------------------
>
> Key: ISIS-299
> URL: https://issues.apache.org/jira/browse/ISIS-299
> Project: Isis
> Issue Type: Improvement
> Components: Isis Core
> Affects Versions: viewer-wicket-1.0.0, security-shiro-1.0.0, core-1.0.0
> Reporter: Daniel Keir Haywood
> Assignee: Daniel Keir Haywood
> Priority: Major
> Fix For: 2.0.0-M6
>
>
> Andi addressed this in M5, but it isn't documented yet.
> At any rate, we now have an actual action that will logout the session; this
> is our formal API.
>
> ~~~~~~~~
> Currently the wicket viewer's logout button merely invalidates the wicket
> session, but does not invalidate the shiro session because there is no API to
> do so.
> This ticket is to provide API for this, and implement in both shiro and
> wicket.
> Should explore the 55minutes' ShiroWicketPlugin to see how it works...
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
