Results 1 to 3 of 3

Thread: External logout Spring security

Hybrid View

  1. #1

    Default External logout Spring security

    Hi,
    I have following requirement. I am using Spring security
    My client's application will fire logout URL with a user token. My application should intercept the logout URL and should invalidate all the active sessions associated with the user token as part of logout. SecurityContextLogoutHandler is able to invalidate the user if the new logout is fired on another tab of the browser. When logout URL is fired in a new browser window with a given user token, the application opened in other browser windows for that user token should have there session invalidated

  2. #2

    Default Works by using HTTPSessionAttributeListener

    We need to check whether this works on Load Balancer environment

  3. #3
    Join Date
    Jun 2009
    Posts
    4

    Default

    I think the same session would get continued and active while a webrequest is redirected form one browser to another one.

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •