tc323+jb241a Can anyone explain this to me. In a struts action servlet, I invalidate a form-based-authenticated user's session object (successfully) and then immediately call getUserPrincipal(), in the same servlet, which returns the users name.
Shouldn't it return null?
(How do I know it was successfully invalidated? Because I cannot access its attributes when trying to see if it still contained the username/password. I get a msg saying the session was invalidated.)