Hello all,

Is there a way to programmatically logout a user? I've seen a bunch of stuff about invalidating the session but that doesn't really clear the authentication. i'm looking for something along the lines of:

Subject subj = new Subject (true, request.getUserPrincipal(), null, null);
LoginContext lc = new LoginContext(null, subj);
lc.logout();

I realize that that isn't going to come close to working but the idea is there: i want to be able to log a user out.

I'd also llike to know if there is a login timeout that can be specified in the config.xml files.

thanks.