Why is it so hard to just logout?

[bjorntj]

I have searched the forum and I have come to the conclusion that what I now do should work, but it doesn't...

I do a submit to logout and the code that is run on logout, is the following..:

FacesContext facesContext = getFacesContext();
        HttpSession session = (HttpSession) facesContext.getExternalContext().getSession(false);

        if (session != null) {
            session.invalidate();
        }
        Cookie terminate = new Cookie(TokenBasedRememberMeServices.ACEGI_SECURITY_HASHED_REMEMBER_ME_COOKIE_KEY, null);
        terminate.setMaxAge(0);
        ((HttpServletResponse)(facesContext.getExternalContext().getResponse())).addCookie(terminate);
        SecurityContextHolder.clearContext(); //invalidate authentication

Why doesn't this work??

btw, what I do after this code is run, is to forward to the same page, but instead of showing a login page, the same page is shown (which should not happen since you are logged out and you have to be logged in get to this page..)


Regards,

BTJ

[Marten Deinum]

Instead of doing a forward, have you tried to do a redirect? A redirect will result in a new request as a forward will stay on the server, without a new request and without sending the edited response (and thus preserving the cookie).

[bjorntj]

Redirect did the trick.... Thx...

BTJ

[Stef-âne]

To logout, I implement this code:

applicationContext-security.xml

	<!-- Start logout config -->	
<bean id="logoutFilter" class="org.acegisecurity.ui.logout.LogoutFilter">
<constructor-arg value="/jsp/index.jsp"/>
<!-- URL redirected to after logout -->
<constructor-arg>
	<list>
		<bean class="org.acegisecurity.ui.logout.SecurityContextLogoutHandler"/>
	</list>
</constructor-arg>
</bean>
	<!-- End logout config -->

index.jsp

<%@ page language="java" pageEncoding="ISO-8859-1" contentType="text/html; charset=ISO-8859-1" %>
<%@ taglib uri="http://java.sun.com/jstl/core" prefix="c" %>
<c:redirect url="/jsp/login.jsp"/>

logout button URL

/j_acegi_logout

Try it, It works fine to me...