Spring Security - Custom logout page

[ahmed yehia]

Spring Security logout links to 'j_spring_security_logout' by default, I want to link to logout.jsp instead.

E.g. in logout.jsp :

<jsp:forward page="j_spring_security_logout" />

<% response.sendRedirect("j_spring_security_logout"); %>

<% session.invalidate(); %>

These all seem to work identical as firing a logout action.

However which could a be better approach.

[Freddy Wong]

You still need to send the request to j_spring_security_logout, but then you can add logout-success-url to redirect it to your logout.jsp

    
<security:logout logout-url="/logout" logout-success-url="/logout.jsp"/>

[ahmed yehia]

I have this in applicationContext-security xml file :

<http>
....
<logout
logout-url="/logout.jsp"
logout-success-url="/" />
</http>

It works fine whether the request came through forward or redirect.

Just want to make sure these 2 approaches don't vary.