Re: [5] Session.logout()

2002-08-29 Thread Patrick Luby
Bob, You are correct that browsers keep passing the user/pass with each request. As for getting the browser to rechallenge, that is very tricky and would be hacky at best. I would expect that when Basic authentication is used and the last request caused Session.logout() to called, the next re

[5] Session.logout()

2002-08-29 Thread Bob Herrmann
The JSP spec 2.4 gives us Session.logout(), what do we do when using Basic authentication? Once challenged, the web browser keeps passing the user/pass (right?) so any ideas about how to get the browser to re-challenge the end user? (change the domain?) Cheers, -bob -- To unsubscribe, e-mail