File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
The moose likes JSF and the fly likes Logout Procedure Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of Make it so: Java DB Connections & Transactions this week in the JDBC forum!
JavaRanch » Java Forums » Java » JSF
Bookmark "Logout Procedure" Watch "Logout Procedure" New topic

Logout Procedure

Enrico Ascaruta Tangau

Joined: Aug 23, 2010
Posts: 11
I'm tring to implement a logout procedure for my web app;
this procedure should be activate from ajax commandLink and should destroy backingbeans, invalidate session and (important) redirect to login page (jsp).

How can I do?
Tim Holloway
Saloon Keeper

Joined: Jun 25, 2001
Posts: 17282

The most common way to force a logout is to use the session.invalidate() method, which destroys all session objects, including the container-managed User Principal object. New developments in JEE also provide a specific logout method if your environment is capable of using it.

Redirecting to a login page is automatic when you use the J2EE standard security services. If you invented your own, you're on your own. You'll have to develop, debug, and maintain your own mechanisms. And deal with the consequences when your "secure" software turns out not to be secure.

An IDE is no substitute for an Intelligent Developer.
I agree. Here's the link:
subject: Logout Procedure
It's not a secret anymore!