Home Explore Help
Register Sign In
github
/
spring-security
mirror of https://github.com/spring-projects/spring-security
2
0
Fork 0
Files Issues 0 Wiki
Browse Source

SEC-1544: Update the tutorial sample to attempt to delete the JSESSIONID cookie on logout.

Luke Taylor 15 years ago
parent
11a87d1fa0
commit
685e0417a7
3 changed files with 2 additions and 9 deletions
Split View Show Diff Stats
  1. 1 1
      samples/tutorial/src/main/webapp/WEB-INF/applicationContext-security.xml
  2. 1 0
      samples/tutorial/src/main/webapp/index.jsp
  3. 0 8
      samples/tutorial/src/main/webapp/loggedout.jsp

+ 1 - 1
samples/tutorial/src/main/webapp/WEB-INF/applicationContext-security.xml
View File 

@@ -30,7 +30,7 @@
 
           -->
 
         <intercept-url pattern="/**" access="permitAll" />
 
         <form-login />
 
-        <logout logout-success-url="/loggedout.jsp"/>
 
+        <logout logout-success-url="/loggedout.jsp" delete-cookies="JSESSIONID"/>
 
         <remember-me />
 
 <!--
 
     Uncomment to enable X509 client authentication support

+ 1 - 0
samples/tutorial/src/main/webapp/index.jsp
View File 

@@ -1,4 +1,5 @@
 
 <%@ taglib prefix="sec" uri="http://www.springframework.org/security/tags" %>
 
+<%@page session="false" %>
 
 <html>
 
 <body>
 
 <h1>Home Page</h1>

+ 0 - 8
samples/tutorial/src/main/webapp/loggedout.jsp
View File 

@@ -1,14 +1,6 @@
 
 <%@page session="false" %>
 
 <%@taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %>
 
 
-
 
-<%
 
-    Cookie cookie = new Cookie("JSESSIONID", null);
 
-    cookie.setPath(request.getContextPath());
 
-    cookie.setMaxAge(0);
 
-    response.addCookie(cookie);
 
-%>
 
-
 
 <html>
 
 <head>
 
 <title>Logged Out</title>