SessionInvalidatorInterceptor.signOut();

[schnelzer]

I saw the new method for logging out in SessionInvalidatorInterceptor

public static void signOut()
 {
 localSignOut.set(Boolean.TRUE);
 }

Could I add a servlet to the portal-server.war that does nothing but call the SessionInvalidatorInterceptor.signOut()? I'll point a logout button in the theme to this servlet in the portal-server.war. Does that sound reasonable?

[julien1]

you need to traverse the interceptor in order to have the signout action be taken in account as the signout is done when the method call goes back in the interceptor chain. (that's why there is a localSignOut, set when the interceptors is traversed)

maybe it's possible to extract code to make this happen without that but now I don't have time to look at it :-(

[bsmithjj]

This is to logout someone from the portal?

What happened to session.invalidate()?

seems like session.invalidate() (for container-managed authentication) is the simplest way to go.

[julien1]

session invalidate does not invalidate properly a user.

resp.signOut() invalidate all the session that a user has used.