How to logout?

[lepekhine]

Dear friends! It's sounds silly: I can login
with JAAS in JBoss but I don't know what should I
write to be log-outed when I press "Logout" on my page.
I tried to invalidate session but it doesnt help.
"There is nothing to understand, you must simply know it",
as one of my colleag said. She was right.
I hope you know, please help me.
Sorry again for silly question.
Yours Alexander

[dmitry_ame]

redirect to a jsp page that has something like this:

<%
request.getSession().invalidate()
%>

[lepekhine]

I have done it. The page wrote "Logout complete" but when I point again to application main page I don't have invitation for entering username and password. I have got it only when I restart the browser. I use basic authentication and IE 6.0. Any comments?

[lepekhine]

I search the forum about logout and found something similar as my question in

http://www.jboss.org/modules/bb/index.html?module=bb&op=viewtopic&t=forums/ I dont understand from it: is it true that browser automatically reconnect user after session beeing invalidate if we use BASIC auth? It seems to me that this is my case.

[jleech]

Yes, the browser will defeat all your attempts to force a reauthentication if your using BASIC authentication. If you use FORM authentication that problem will go away. IIRC Internet Exploder also had issues launching plugins when the content came from behind BASIC auth. Use FORM auth or write your own in a Filter.