File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
http://aspose.com/file-tools
The moose likes Tomcat and the fly likes Can logout be implemented? Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of Soft Skills this week in the Jobs Discussion forum!
JavaRanch » Java Forums » Products » Tomcat
Bookmark "Can logout be implemented?" Watch "Can logout be implemented?" New topic
Author

Can logout be implemented?

Steffen Foldager
Ranch Hand

Joined: Mar 22, 2001
Posts: 58
Using Tomcat's security feature, how can I change or delete the user credentials without closing the browser window?
In other words: Is there any way at all to implement a logout?
Thanks,
Steffen


Steffen Foldager<p>Sun Certified Java Programmer<br />Sun Certified Web Component Developer
Steffen Foldager
Ranch Hand

Joined: Mar 22, 2001
Posts: 58
Come on, guys...
I can't figure out whether this question is really stupid, really tricky or if I overlooked something obvious.
Is the following statement true then?
"The only way to implement a logout using J2EE authentication in Tomcat is by forcing the browser to close"
If yes, then the J2EE authentication really is of no practical use (which I don't hope..)
Somebody help me, please
smercmu
Greenhorn

Joined: Feb 25, 2002
Posts: 20
Originally posted by Steffen Foldager:
Come on, guys...
I can't figure out whether this question is really stupid, really tricky or if I overlooked something obvious.
Is the following statement true then?
"The only way to implement a logout using J2EE authentication in Tomcat is by forcing the browser to close"
If yes, then the J2EE authentication really is of no practical use (which I don't hope..)
Somebody help me, please


I've been looking into that recently too. The login credentials are held by the browser (ie in my case) and you have to tell the browser to reset or clear those cached credentials. I found an activeX component that does it for IE. figures... but I have yet to see any javascript that would do it.
Bruce Jin
Ranch Hand

Joined: Sep 20, 2001
Posts: 671
I have the same question.
How to implement signoff without closing browser?
I am using apache/tomcat builtin authentication.
Thanks.


BJ - SCJP and SCWCD
We love Java programming. It is contagious, very cool, and lot of fun. - Peter Coad, Java Design

Crazy Bikes created by m-Power
Tom Wolve
Ranch Hand

Joined: Sep 22, 2003
Posts: 32
Hi,
I'm still testing but invalidating the session
so far works fine.
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: Can logout be implemented?