my environment:
jboss4.2.2GA
EJB3
JAX-WS
I deploy my stateless session beans as @WebService and configure it as:
@WebContext(contextRoot="bla", urlPattern = "bla", authMethod ="BASIC", transportGuarantee ="NONE", secureWSDLAccess = true)
For the authMethod=BASIC i use a class which implements javax.security.auth.spi.LoginModule as described by JAAS
everything works very fine including the login!
BUT:
how can I call the LoginModule.logout() using a webservice method? I can see by debuging, that the method is called sometimes - but from which event?
I have acess to the following ressources in my SessionBean:
@Resource() private WebServiceContext wsContext;
@Resource private SessionContext sessionContext;
How to control the call to LoginModule.logout() ?