This week's book giveaway is in the Servlets forum.
We're giving away four copies of Murach's Java Servlets and JSP and have Joel Murach on-line!
See this thread for details.
The moose likes JForum and the fly likes session invalidating for sso users. Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of Murach's Java Servlets and JSP this week in the Servlets forum!
JavaRanch » Java Forums » Products » JForum
Bookmark "session invalidating for sso users." Watch "session invalidating for sso users." New topic
Author

session invalidating for sso users.

Migrated From Jforum.net
Ranch Hand

Joined: Apr 22, 2012
Posts: 17424
Hi ,

I am new to JForum ....
am successful in integrating sso with my web app ....

have a doubt ...

if applicaiton user does'nt exist in JForum it tries to login as guest ....
(or we can tweak it to register to JForum ) ....

My question here is ..when I logout of my application ...how do i invalidate the session created for the app user in JForum ???.....

My application structure looks kinda like this


App.ear / web.war
App.ear / Jforum.war

Thanks,

Kurt.

[originally posted on jforum.net by kurtcobain]
Migrated From Jforum.net
Ranch Hand

Joined: Apr 22, 2012
Posts: 17424
I'm not sure you need to worry about the webapp Session invalidation.

Each jForum request goes thru the ControllerUtils.refreshSession() method. With SSO, this will call the SSO.isSessionValid(UserSession, request) method. This is where you should verify that the existing jForum UserSession is valid for your SSO conditions or no (e.g., does the SSO cookie say it's a different user?)
[originally posted on jforum.net by monroe]
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: session invalidating for sso users.
 
Similar Threads
When will 2.1.5 be relased?
Jforum integration problem with SSO
SSO - email address
request.getRemoteUser() returns null. (Sun App Server 8.1)
SSO /redirect / anonymous users