Re: basic question regarding BASIC and FORMS logins

2006-03-13 Thread Khawaja Shams
Hello, I thought the topic was relevant, and the people involved in this discussion would know the answer. I did not know this is considered hijacking a thread. I appologize for the inconvenience, and I will repost in a new thread. Khawaja On 3/9/06, David Smith [EMAIL PROTECTED] wrote:

Re: basic question regarding BASIC and FORMS logins

2006-03-09 Thread David Smith
You could start by not hijack an existing thread. Please repost your question in a new thread. --David Khawaja Shams wrote: Hello, If I am using BASIC authentication, how can I log users out? I tried doing session.Invalidate, but as described above, it seems like the browser is caching the

Re: basic question regarding BASIC and FORMS logins

2006-03-08 Thread David Smith
Kind of. With BASIC auth, the session from the server's perspective can still go away. But as the browser caches the credentials, new session creation is automatic. The end user experience depends on the data stored in the session, webapp design, and where they were when they abandon the

RE: basic question regarding BASIC and FORMS logins

2006-03-08 Thread Klotz Jr, Dennis
a request, tomcat opens a new session? I'm pretty sure the answer is no. Regards, -Dennis Klotz -Original Message- From: David Smith [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 08, 2006 6:07 PM To: Tomcat Users List Subject: Re: basic question regarding BASIC and FORMS logins

RE: basic question regarding BASIC and FORMS logins

2006-03-08 Thread Richard Mixon
Dennis, For just that webapp, you can always bump the session timeout to a very high value. That would just take a change to the web.xml, no change of authentication method needed. HTH - Richard -Original Message- From: Klotz Jr, Dennis [mailto:[EMAIL PROTECTED] Sent: Wednesday, March

Re: basic question regarding BASIC and FORMS logins

2006-03-08 Thread David Smith
An idea I've also seen floated is to have javascript keep refreshing a small transparent image every so often. I've never tried it, but it shows up frequently as a solution in google. Benefit is you have indefinite session life without a lot of dead session clutter. --David Richard Mixon

Re: basic question regarding BASIC and FORMS logins

2006-03-08 Thread Khawaja Shams
Hello, If I am using BASIC authentication, how can I log users out? I tried doing session.Invalidate, but as described above, it seems like the browser is caching the credentials. I would like my app users to be able to log out. I would sincerely appreciate any guidance. Khawaja On 3/8/06,