You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@isis.apache.org by "Daniel Keir Haywood (Jira)" <ji...@apache.org> on 2021/04/15 06:29:00 UTC

[jira] [Updated] (ISIS-299) Document the logout action. (Was: Extend the authentication API so that can explicitly logout session.)

     [ https://issues.apache.org/jira/browse/ISIS-299?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Daniel Keir Haywood updated ISIS-299:
-------------------------------------
    Summary: Document the logout action.  (Was: Extend the authentication API so that can explicitly logout session.)  (was: Extend the authentication API so that can explicitly logout session.)

> Document the logout action.  (Was: Extend the authentication API so that can explicitly logout session.)
> --------------------------------------------------------------------------------------------------------
>
>                 Key: ISIS-299
>                 URL: https://issues.apache.org/jira/browse/ISIS-299
>             Project: Isis
>          Issue Type: Improvement
>          Components: Isis Core
>    Affects Versions: viewer-wicket-1.0.0, security-shiro-1.0.0, core-1.0.0
>            Reporter: Daniel Keir Haywood
>            Assignee: Daniel Keir Haywood
>            Priority: Major
>             Fix For: 2.0.0-M6
>
>
> Andi addressed this in M5, but it isn't documented yet.
> At any rate, we now have an actual action that will logout the session; this is our formal API.
>  
> ~~~~~~~~
> Currently the wicket viewer's logout button merely invalidates the wicket session, but does not invalidate the shiro session because there is no API to do so.
> This ticket is to provide API for this, and implement in both shiro and wicket.
> Should explore the 55minutes' ShiroWicketPlugin to see how it works...



--
This message was sent by Atlassian Jira
(v8.3.4#803005)