Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

SEC-1544: Update the tutorial sample to attempt to delete the JSESSIONID cookie on logout.

This commit is contained in:
Luke Taylor 2010-09-19 18:30:52 +01:00
parent 11a87d1fa0
commit 685e0417a7
3 changed files with 2 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
samples/tutorial/src/main/webapp/WEB-INF/applicationContext-security.xml
View File

@ -30,7 +30,7 @@
-->
<intercept-url pattern="/**" access="permitAll" />
<form-login />
<logout logout-success-url="/loggedout.jsp"/>
<logout logout-success-url="/loggedout.jsp" delete-cookies="JSESSIONID"/>
<remember-me />
<!--
Uncomment to enable X509 client authentication support

1
samples/tutorial/src/main/webapp/index.jsp
View File

@ -1,4 +1,5 @@
<%@ taglib prefix="sec" uri="http://www.springframework.org/security/tags" %>
<%@page session="false" %>
<html>
<body>
<h1>Home Page</h1>

8
samples/tutorial/src/main/webapp/loggedout.jsp
View File

@ -1,14 +1,6 @@
<%@page session="false" %>
<%@taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %>
<%
Cookie cookie = new Cookie("JSESSIONID", null);
cookie.setPath(request.getContextPath());
cookie.setMaxAge(0);
response.addCookie(cookie);
%>
<html>
<head>
<title>Logged Out</title>