[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
this is configurable in web.xml of the portal, you can use whatever you want (basic,form,etc...) the reason we added the logout is to make smth portable. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869761#3869761 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869761 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
Yeap, the portal handles http sessions different than I thougt. I was not aware of that there were different http sessions. Personally I prefer "form" based authentication (the way it is in beta 1). With "basic" authentication, as you say, you can't "log out" by invalidating the session. regards Jan Ole View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869759#3869759 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869759 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
janole, yes the spec says that and it is what it does, but you misunderstand it. portletsession.invalidate() invalidates the http session of the portlet war file, not the session of the portal. there are 2 separate sessions. the portable way to do that is to bundle your portlet in the war file of the portal. in that case the 2 sessions will be the same. but at the end, invalidating the session does not garantee that the users logout. you have no garantee that invalidating a session performs logout but this is the case on jboss portal when "form" based authentication is used. it would not work with "basic" authentication. And that behavior could change in the future for jboss portal as well. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869746#3869746 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869746 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
The spec also defines: "If the HttpSession object is invalidated, the PortletSession object must also be invalidated by the portlet container.cxv If the PortletSession object is invalidated by a portlet, the portlet container must invalidate the associated HttpSession object." "The getCreationTime, getId, getLastAccessedTime, getMaxInactiveInterval, invalidate, isNew and setMaxInactiveInterval methods of the PortletSession interface must provide the same functionality as the methods of the HttpSession interface with identical names." So since HttpServletRequest.invalidate() invalidates the session and set remoteUser to null, I thougt the same would happen for PortletSession.invalidate() What you are saying is that the portlet session does not "own" the user. And that the portal itself has a http session, wich the user belongs to. If this is correct, how can I force a user logout from the portal in a portlet wich only implements JSR-168 standard classlib (and not the JBoss add-on classlib)? View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869743#3869743 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869743 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
PortletSession.invalidate() does not invalidate the current user, it only invalides the session related to the portlet application. The spec defines that. req.getLogout() invalidates another session which is not the same and performs logout. The session invalidated in the one of the portal. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869734#3869734 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869734 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
It should, as per the api: public void invalidate() | Invalidates this session (all scopes) and unbinds any objects bound to it. | Invalidating the portlet session will result in invalidating the underlying HttpSession | | Throws: | java.lang.IllegalStateException - if this method is called on a session which has already been invalidated If this is not hapenning, we need to take a closer look at it. Are you not getting the expected behaviour in beta1? View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869726#3869726 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869726 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
I have just "upgraded" to Beta 1, and I like the new login procedure mutch
better.
In fact much has improved. Keep up the good work!
I guess I have to start using CVS version to keep track of the news and
improvements.
request.logout() works fine in my custom logout function, and the reason for
that is that the function calls HttpServletRequest.invalidate() direct
/**
* Perform a logout.
*/
public void logout()
{
req.getSession().invalidate();
}
but still when i call request.getPortletSessionInvalidate(), invalidating of
the session is not done.
I thougt that request.getPortletSessionInvalidate() should do the same thing.
For security reasons we still want to provide easy access to logout in our
portlets.
View the original post :
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869704#3869704
Reply to the post :
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869704
---
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
___
JBoss-Development mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
This is new, i thought you were using the CVS version sorry. The Beta 1 just came out, you should start playing with that one. Things changed a lot in the login part. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869564#3869564 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869564 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
actually, I cant find a method with name logout in either JBossActionRequest or JBossRenderRequest. I'm running JBoss Portal 2.0 Alpha binary. Is this a new method? View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869563#3869563 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869563 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
Tanks, I'll try req.logout() regards Jan Ole View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869561#3869561 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869561 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
As of today, JBoss portal is localized on web browser's preferences only. (that is often not enough, and we will improve that) If you are creating a JBoss Portlet, you can call req.logout() to log out. I will look closer at portletSession.invalidate() View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869553#3869553 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869553 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
Right now we are bulding a demo portal, and we are short of time. We have to have a localized demo portal with some basic functionallity up and running, in order to invite customers to participate in our project. JBoss Portal seems promsing, and we might use JBoss Portal in the final project. So in the long term vi might well use the jboss user portlet. But still I think that portletSession.invalidate() should work in custom portlets. Could this be a bug, or am I doing somthing wrong? View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869551#3869551 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869551 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
So what does not fit your needs in the current user portlet ? There is no language per user so far, but will come at some point. You could start by extending the existing portlet. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869548#3869548 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869548 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
The idea was to make i custom login portlet for logging in to JBoss Portal. In the same portlet I also want to have a logout fuction for user that are logged in. The reason for doing so, is to have a Portal that are localized and presenting information in the native lanuage. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869546#3869546 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869546 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
What are you trying to do ? View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869544#3869544 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869544 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
After I have clicked on the logoutlink in my custom portlet, to run the code posted, I type the following URL's (and refreshes the pages by pressing F5 in IE) http://localhost:1080/portal/index.html?_id=page.solar.infodesk, still logged in http://localhost:1080/portal/index.html?_id=page.default.admin, still logged in now I click on the logout link in Jboss User portlet, and type the same URL's, and refresh the pages http://localhost:1080/portal/index.html?_id=page.solar.infodesk, not logged in http://localhost:1080/portal/index.html?_id=page.default.admin, not logged in View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869542#3869542 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869542 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
When you invalidate a session, it is invalidated on the following HTTP request. Not the current one. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869535#3869535 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869535 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
One more try I'm logging in to JBoss Portal Realm with , in the login form. should be I'm logging in to JBoss Portal Realm with form method="POST" action="/portal/login", in the login form. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869533#3869533 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869533 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
[JBoss-dev] [Design of JBoss Portal] - Re: not able to get request.getPortletSession().invalidate()
I'm logging in to JBoss Portal Realm with , in the login form. should be I'm logging in to JBoss Portal Realm with , in the login form. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3869532#3869532 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3869532 --- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ___ JBoss-Development mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-development
