Mailing-List: contact clerezza-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: clerezza-dev@incubator.apache.org
Received-SPF: pass (athena.apache.org: domain of henry.story@gmail.com
 designates 74.125.82.175 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=from:content-type:content-transfer-encoding:subject:date:message-id
         :to:mime-version:x-mailer;
        b=Da37SUwm8FMxom3LyHvYKpTHqysNu801+9Qa02gROy52gXoF9wFgyzs7WDjvuKmGAM
         ZbHQhbskWvhWedGQI9r/vBvFV+KVn7Z74XdGqBZxcn6NTpV/Qxk0bIjTxHaOBiAfEWDG
         WCjywr8g7vWwRaEz4fnDszOivqDsIhMFi5Yd0=
From: Henry Story <henry.story@gmail.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Subject: getting the servlet request (and ssl session clearing in jetty)
Date: Fri, 20 Aug 2010 19:39:36 +0200
Message-Id: <9AAA1B83-CCE7-454F-9461-07BC4752A131@bblfish.net>
To: clerezza-dev@incubator.apache.org
Mime-Version: 1.0 (Apple Message framework v1081)

I don't seem to be able to get the servlet request from a jsr-311 =
annotated method in Clerezza.

I tried quite a lot of different things, including things like

 @GET
  public Response logout(@Context UriInfo uriInfo,
	    @HeaderParam("Referer") URI referer,
	    @Context ServletRequest req) {
  ...
 }


With no success. req is just null.

Any ideas?

-----

Btw. I am trying to clear the session information to see if there is any =
way of getting around the issues of logging out with SSL.  I need to try =
something out to see if this will work. Any idea if it is possible to =
clear the SSL Session information?=20

You can do it in apache as described at the end of this document:

http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html

// Standard HTTP session invalidation
session.invalidate();

// Invalidate the SSL Session
org.apache.tomcat.util.net.SSLSessionManager mgr =3D
  (org.apache.tomcat.util.net.SSLSessionManager)
  request.getAttribute("javax.servlet.request.ssl_session_mgr");
mgr.invalidateSession();

// Close the conection since the SSL session will be active until the =
connection
// is closed
response.setHeader("Connection", "close");

Henry