Is there a way to programmatically logout a user? I've seen a bunch of stuff about invalidating the session but that doesn't really clear the authentication. i'm looking for something along the lines of:
Subject subj = new Subject (true, request.getUserPrincipal(), null, null); LoginContext lc = new LoginContext(null, subj); lc.logout();
I realize that that isn't going to come close to working but the idea is there: i want to be able to log a user out.
I'd also llike to know if there is a login timeout that can be specified in the config.xml files.