Re: FORM based authentication LOGOUT

2006-11-03 Thread Christopher Schultz
sion? It's possible that the request needs to be recycled (or a new session created) before getUserPrincipal and isUserInRole will return different values. Just a thought? -chris > > John > >>> From: John McPeek [mailto:[EMAIL PROTECTED] Subject: FORM based >>

Re: FORM based authentication LOGOUT

2006-11-03 Thread John McPeek
When I call request.getUserPrincipal(); I still get the Principal back and I can still call request.isUserInRole( "Foo" ); and get a valid response for the currently logged in user. John From: John McPeek [mailto:[EMAIL PROTECTED] Subject: FORM based authentication LOGOUT I hav

RE: FORM based authentication LOGOUT

2006-11-02 Thread Caldarale, Charles R
> From: John McPeek [mailto:[EMAIL PROTECTED] > Subject: FORM based authentication LOGOUT > > I have tried to invalidate the session and get a new one. > No Dice. When you say "No Dice", what actually happens? All the admin app for Tomcat does is the follo

FORM based authentication LOGOUT

2006-11-02 Thread John McPeek
Hi, I have written a JAAS LoginModule and use it with FORM based authentication. Everything works fine, except I can't figure out how to log a user out. I have tried to invalidate the session and get a new one. No Dice. I did a search on the source and didn't find much. There are articles on t