You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@isis.apache.org by "Daniel Keir Haywood (Jira)" <ji...@apache.org> on 2021/04/15 06:29:00 UTC
[jira] [Updated] (ISIS-299) Extend the authentication API so that
can explicitly logout session.
[ https://issues.apache.org/jira/browse/ISIS-299?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Daniel Keir Haywood updated ISIS-299:
-------------------------------------
Description:
Andi addressed this in M5, but it isn't documented yet.
At any rate, we now have an actual action that will logout the session; this is our formal API.
~~~~~~~~
Currently the wicket viewer's logout button merely invalidates the wicket session, but does not invalidate the shiro session because there is no API to do so.
This ticket is to provide API for this, and implement in both shiro and wicket.
Should explore the 55minutes' ShiroWicketPlugin to see how it works...
was:
Currently the wicket viewer's logout button merely invalidates the wicket session, but does not invalidate the shiro session because there is no API to do so.
This ticket is to provide API for this, and implement in both shiro and wicket.
Should explore the 55minutes' ShiroWicketPlugin to see how it works...
> Extend the authentication API so that can explicitly logout session.
> --------------------------------------------------------------------
>
> Key: ISIS-299
> URL: https://issues.apache.org/jira/browse/ISIS-299
> Project: Isis
> Issue Type: Improvement
> Components: Isis Core
> Affects Versions: viewer-wicket-1.0.0, security-shiro-1.0.0, core-1.0.0
> Reporter: Daniel Keir Haywood
> Assignee: Daniel Keir Haywood
> Priority: Major
> Fix For: 2.0.0-M6
>
>
> Andi addressed this in M5, but it isn't documented yet.
> At any rate, we now have an actual action that will logout the session; this is our formal API.
>
> ~~~~~~~~
> Currently the wicket viewer's logout button merely invalidates the wicket session, but does not invalidate the shiro session because there is no API to do so.
> This ticket is to provide API for this, and implement in both shiro and wicket.
> Should explore the 55minutes' ShiroWicketPlugin to see how it works...
--
This message was sent by Atlassian Jira
(v8.3.4#803005)