Hello.

I have several web applications running on jetty/jboss. All of them are secure and require user to login. I have a problem. User gets into one applications, then he exits. ( I call session.invalidate())

Then, user goes to another application, he logs in again and logs out again. BUT, when he enters the first application again, he is not prompted for username/password. I belive jetty remembers user's data. I hoped thant when I do session.invalidate(), everything about this user, object bound to session as well as his credidentials, will be forgoten. This is not the case. So how to do this?

 

Thank you very much for your help,

Ivan

Reply via email to