[Acegisecurity-developer] session.invalidate() vs. ContextHolder.setContext(null)

2005-03-09 Thread Matt Raible
With Acegi Security 0.7.0, I was able to use session.invalidate() to logout a user - much like I do when using container-managed authentication. However, with 0.8.0, I've found that I have to use ContextHolder.setContext(null). Is there anyway to change back to the old behavior so I don't

[Acegisecurity-developer] FilterChainProxy and ContextHolderAwareRequestFilter

2005-03-09 Thread Matt Raible
Sorry for all the questions, just want to get all my ducks in a row so AppFuse is using Acegi Security in the recommended fashion. There are two questions below: quote from: 1.15.4. Filter Ordering All of the above filters use |FilterToBeanProxy| or |FilterChainProxy|, which is discussed in the