Details
-
Type:
Bug
-
Status:
Resolved
-
Priority:
Minor
-
Resolution: Fixed
-
Affects Version/s: 1.9.3
-
Component/s: Application Servers, Security
-
Labels:None
-
Environment:Windows Xp + Websphere 6.0.2.0 + IBM JDK/JRE 1.4.2
Description
When I click logout.jsp, it returns a 404.
However, acegi sample app logouot work on websphere 6.0.2
Matt suggest the following temp solution:
Remove logoutFilter from security.xml (as a bean definition and in the filterChain) and
replace it with a web/logout.jsp page that has the following:
<%@ include file="/common/taglibs.jsp"%>
<%@ page import="javax.servlet.http.Cookie" %>
<%@ page import="org.acegisecurity.ui.rememberme.TokenBasedRememberMeServices"
%>
<%
session.invalidate();
Cookie terminate = new
Cookie(TokenBasedRememberMeServices.ACEGI_SECURITY_HASHED_REMEMBER_ME_COOKIE_KEY,
null);
terminate.setMaxAge(0);
response.addCookie(terminate);
%>
<c:redirect url="/mainMenu.html"/>