While attempting to upgrade my webapp to Tapestry 5.1.0.2 from Tapestry 5.0.18 
I run into a problem related with tapestry-spring-security 2.0.1.

Triggering LogoutService.logout() in a 5.1.0.2 environment results in a 
IllegalStateException which was not the case in 5.0.18.

>From a recent discussion in another thread in this list [1] as well as the 
>comments in TAP5-413 I suppose the problem's root is that Spring Security's 
>SecurityContextLogoutHandler.logout() [3] actually invalidates the Servlet API 
>HttpSession rather than Tapestry's Session. 

I'd be interested to learn if anyone else is facing the same problem and has 
solutions or ideas for it.

Best wishes,

Volker


[1] Thread "[T5 5.0.18] java.lang.IllegalStateException: Cannot create a 
session after the response has been committed"

[2] http://issues.apache.org/jira/browse/TAP5-413

[3] 
http://acegisecurity.svn.sourceforge.net/viewvc/acegisecurity/spring-security/tags/spring-security-parent-2.0.4/core/src/main/java/org/springframework/security/ui/logout/SecurityContextLogoutHandler.java?view=markup

-- 
View this message in context: 
http://n2.nabble.com/Tapestry-5.1.0.2-and-tapestry-spring-security-2.0.1-tp2592789p2592789.html
Sent from the Tapestry Users mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org

Reply via email to