getting LoginContext after form based authentication

[martin0]

I hope this has a simple answer....

I've got a web application and authenticate users with form based jass authentication.

When I want to log them out, I believe I need the LoginContext with which they were logged in. How do I get that? I don't see any obvious methods like request.getLoginContext() some such function.

TIA
Martin

[martin0]

okay session.invalidate seems to do the trick

[silviu.marcu]

the session invalidate does not work for BASIC type jass security...

[brian.stansberry]

HttpSession.invalidate() does kill the session on the server side. However, the browser caches the BASIC authentication credentials and will continue to present them to the server for the life of the browser session. When this happens, the user is reauthenticated on the server side, but it's all transparent to the user.