mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-02-20 21:38:48 +00:00
When the user logs out, the handler will attempt to delete the named cookies (which it is constructor-injected with) by expiring them in the response. Also added documentation on the feature and a suggestion for deleting JSESSIONID through an Apache proxy server, if the servlet container doesn't allow clearing the session cookie.