I'm  trying to implement a "forget password" capability. If the user hits the "forget password" button he gets back an SC_UNAUTHORIZED response.
When the servlet returns the SC_UNAUTHORIZED  response, the browser's dialog box hint is
 
    "Enter user name for AuthName at myserver.com"
 
I specify the AuthName with the setHeader method like this:
 
                response.setHeader("WWW-Authenticate","Basic realm=\"AuthName\"");
 
I'm using Apache web server.
But the problem is that I can't really terminate a user's session from browser, because this still remember the username and password. The only way that I found to do this is closing the browser.
Does anybody have any idea to solve this problem??.
 
Carlos    8-)
 

Reply via email to