my environment:
jboss4.2.2GA
EJB3
JAX-WS

I deploy my stateless session beans as @WebService and configure it as:

@WebContext(contextRoot="bla", urlPattern = "bla", authMethod ="BASIC", transportGuarantee ="NONE", secureWSDLAccess = true)

For the authMethod=BASIC i use a class which implements javax.security.auth.spi.LoginModule as described by JAAS

everything works very fine including the login!

BUT:
how can I call the LoginModule.logout() using a webservice method? I can see by debuging, that the method is called sometimes - but from which event?

I have acess to the following ressources in my SessionBean:

@Resource() private WebServiceContext wsContext;
@Resource private SessionContext sessionContext;

How to control the call to LoginModule.logout() ?