2008-01-16

Bug : LogoutFilter return a 404 on Websphere 6.0.2

关键字: application servers, security
Environment: Windows Xp + Websphere 6.0.2.0 + IBM JDK/JRE 1.4.2
Description: When I click logout.jsp, it returns a 404.

However, acegi sample app logouot work on websphere 6.0.2

Matt suggest the following temp solution:

Remove logoutFilter from security.xml (as a bean definition and in the filterChain) and
replace it with a web/logout.jsp page that has the following: 
<%@ include file="/common/taglibs.jsp"%>
<%@ page import="javax.servlet.http.Cookie" %>
<%@ page import="org.acegisecurity.ui.rememberme.TokenBasedRememberMeServices"
%>

<%
session.invalidate();
Cookie terminate = new
Cookie(TokenBasedRememberMeServices.ACEGI_SECURITY_HASHED_REMEMBER_ME_COOKIE_KEY,
null);
terminate.setMaxAge(0);
response.addCookie(terminate);
%>

<c:redirect url="/mainMenu.html"/>
评论
发表评论

您还没有登录，请登录后发表评论

ispring
搜索本博客
最近加入圈子
存档
最新评论