On Feb 24, 2009, at 3:02 AM, Jean-Louis MONTEIRO wrote:
Hi all,
I'm facing a strange behavior related to the logout of provided
SecurityServiceImpl.
It seems to me we should invoke the JAAS logout during the
SecurityServiceImpl#logout
At the moment:
- login implies: subject registration in a map and JAAS login
invocation
- logout implies: subject unbinding only
I believe we have to logout from JAAS too.
Could you give me further details ?
I've done a patch for that. If all agree on that, I can open a JIRA
and
submit a patch.
Seems like a good change. If the tests pass with the patch, I'm all
for it.
-David
