You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@isis.apache.org by "Dan Haywood (JIRA)" <ji...@apache.org> on 2013/09/06 14:36:52 UTC
[jira] [Commented] (ISIS-299) Extend the authentication API so that
can explicitly logout session.
[ https://issues.apache.org/jira/browse/ISIS-299?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13760171#comment-13760171 ]
Dan Haywood commented on ISIS-299:
----------------------------------
Stability: Extend AuthenticationSession to allow logout (explore the 55minutes' ShiroWicketPlugin and how it works...)
> Extend the authentication API so that can explicitly logout session.
> --------------------------------------------------------------------
>
> Key: ISIS-299
> URL: https://issues.apache.org/jira/browse/ISIS-299
> Project: Isis
> Issue Type: Improvement
> Components: Core, Security: Shiro, Viewer: Wicket
> Affects Versions: viewer-wicket-1.0.0, security-shiro-1.0.0, core-1.0.0
> Reporter: Dan Haywood
> Assignee: Dan Haywood
> Fix For: viewer-wicket-1.3.0, security-shiro-1.2.0, core-1.3.0
>
>
> Currently the wicket viewer's logout button merely invalidates the wicket session, but does not invalidate the shiro session because there is no API to do so.
> This ticket is to provide API for this, and implement in both shiro and wicket.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira