You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@isis.apache.org by "Daniel Keir Haywood (Jira)" <ji...@apache.org> on 2021/04/15 06:29:00 UTC
[jira] [Updated] (ISIS-299) Document the logout action. (Was:
Extend the authentication API so that can explicitly logout session.)
[ https://issues.apache.org/jira/browse/ISIS-299?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Daniel Keir Haywood updated ISIS-299:
-------------------------------------
Summary: Document the logout action. (Was: Extend the authentication API so that can explicitly logout session.) (was: Extend the authentication API so that can explicitly logout session.)
> Document the logout action. (Was: Extend the authentication API so that can explicitly logout session.)
> --------------------------------------------------------------------------------------------------------
>
> Key: ISIS-299
> URL: https://issues.apache.org/jira/browse/ISIS-299
> Project: Isis
> Issue Type: Improvement
> Components: Isis Core
> Affects Versions: viewer-wicket-1.0.0, security-shiro-1.0.0, core-1.0.0
> Reporter: Daniel Keir Haywood
> Assignee: Daniel Keir Haywood
> Priority: Major
> Fix For: 2.0.0-M6
>
>
> Andi addressed this in M5, but it isn't documented yet.
> At any rate, we now have an actual action that will logout the session; this is our formal API.
>
> ~~~~~~~~
> Currently the wicket viewer's logout button merely invalidates the wicket session, but does not invalidate the shiro session because there is no API to do so.
> This ticket is to provide API for this, and implement in both shiro and wicket.
> Should explore the 55minutes' ShiroWicketPlugin to see how it works...
--
This message was sent by Atlassian Jira
(v8.3.4#803005)