mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-03-30 20:08:26 +00:00
When the user logs out, the handler will attempt to delete the named cookies (which it is constructor-injected with) by expiring them in the response. Also added documentation on the feature and a suggestion for deleting JSESSIONID through an Apache proxy server, if the servlet container doesn't allow clearing the session cookie.