Return-Path: 
 <user-return-5149-apmail-shiro-user-archive=shiro.apache.org@shiro.apache.org>
X-Original-To: apmail-shiro-user-archive@www.apache.org
Delivered-To: apmail-shiro-user-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 18B8410F11
	for <apmail-shiro-user-archive@www.apache.org>;
 Sat, 20 Jul 2013 06:18:23 +0000 (UTC)
Received: (qmail 53686 invoked by uid 500); 20 Jul 2013 06:18:22 -0000
Delivered-To: apmail-shiro-user-archive@shiro.apache.org
Received: (qmail 53017 invoked by uid 500); 20 Jul 2013 06:18:14 -0000
Mailing-List: contact user-help@shiro.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:user-help@shiro.apache.org>
List-Unsubscribe: <mailto:user-unsubscribe@shiro.apache.org>
List-Post: <mailto:user@shiro.apache.org>
List-Id: <user.shiro.apache.org>
Reply-To: user@shiro.apache.org
Delivered-To: mailing list user@shiro.apache.org
Received: (qmail 52989 invoked by uid 99); 20 Jul 2013 06:18:12 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 20 Jul 2013 06:18:12 +0000
X-ASF-Spam-Status: No, hits=1.5 required=5.0
	tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (nike.apache.org: domain of cairken@gmail.com designates
 209.85.220.169 as permitted sender)
Received: from [209.85.220.169] (HELO mail-vc0-f169.google.com)
 (209.85.220.169)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 20 Jul 2013 06:18:05 +0000
Received: by mail-vc0-f169.google.com with SMTP id ib11so1945961vcb.28
        for <user@shiro.apache.org>; Fri, 19 Jul 2013 23:17:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:date:message-id:subject:from:to:content-type;
        bh=pe32ros09MF3aztysfdypaC+7TBLZRsRvDD+BGObZKY=;
        b=XrNIOZECRFSX+ksx1XeNX/Uaeyb5RmPZZzdxSt+cxjWi+5rBnvWQLONLl1mwgPE3uL
         xHZ4E6oSS2nI/h8wFmIRCHJj89tHRPDOamTTNulBzeaH/sdeNxpQ8PwQwW7D4DB0INgA
         zwOJXXK+/rIdN0O0KiJy+YmYuYFhMplRW1UXJL9ECLHR7HZIgC3XB7KWTVQfaOmfWutb
         kqvZNNmt5rslEYSmWltQSpxiOOocgf2GVUZqEHwVqClQ+9tTqWfmsGDwSH/QOU7gudwZ
         P95yPXZmSKHY0GTB2TMBqrqNc7okpRihDnXCtY/vpiZkBPKFwwd+SoIcKMSYsL76/szB
         Ei8A==
MIME-Version: 1.0
X-Received: by 10.58.226.199 with SMTP id ru7mr6734167vec.68.1374301064648;
 Fri, 19 Jul 2013 23:17:44 -0700 (PDT)
Received: by 10.58.198.99 with HTTP; Fri, 19 Jul 2013 23:17:44 -0700 (PDT)
Date: Fri, 19 Jul 2013 23:17:44 -0700
Message-ID: 
 <CALYUinAV4RiXsOwa5UWck+4kvJ5g-2M0wdeX3zVBHWG--dZw=A@mail.gmail.com>
Subject: Shiro logoutFilter not performing logout...
From: Jillian <cairken@gmail.com>
To: user@shiro.apache.org
Content-Type: multipart/alternative; boundary=047d7bd6afe6c5e13704e1eb6603
X-Virus-Checked: Checked by ClamAV on apache.org

--047d7bd6afe6c5e13704e1eb6603
Content-Type: text/plain; charset=ISO-8859-1

Hello,

I'm new to struts2 & shiro, and I'm trying to create a really simple sample
app (and I haven't found an example of this integration anywhere - so I
hope this is possible).  I'm using Tomcat7, Struts2 2.3.15, and Shiro 1.2.2


I've currently just got one action that grabs some database values and
displays them.  I have shiro protecting the namespace that action is in,
I'm using a very simple standard login.jsp and the users are currently
configured in the shiro.ini.  Log in works, redirects to the action, all is
well.

But I'm having trouble with a simple "logout" link on the results page. I'm
trying to use the logout filter.  Here's my shiro.ini (comments removed):

[main]
authc.loginUrl = /login.jsp
authc.successUrl  = /displayStudent
logout.redirectUrl = /logout.jsp

[urls]
login.jsp = ssl[8443], authc
/logout = logout
/student/** = authc
/** = authc

[users]
admin=hello
jill=bob


(logout.jsp is just a placeholder so I could see if the logout worked - in
the end it willl redirect to login)

My link is:

<a href="<s:url action="logoutAction"/>">LOGOUT</a>


And the struts.xml action for that link is:
       <action name="logoutAction">
          <result>/logout</result>
       </action>

The error I'm getting is your standard 404:

HTTP Status 404 - /b2mu-1.0/logout
type Status report
message /b2mu-1.0/logout
description The requested resource is not available.


And if I refresh the app I'm redirected to the protected content (ie, I'm
still logged in).  So I'm pretty sure the action is redirecting to the
appropriate url, which should be caught by shiro.   Am I missing some
logout filter configuration that I need?

Thanks!
Jillian

--047d7bd6afe6c5e13704e1eb6603
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hello,<div><br></div><div>I&#39;m new to struts2 &amp; shi=
ro, and I&#39;m trying to create a really simple sample app (and I haven&#3=
9;t found an example of this integration anywhere - so I hope this is possi=
ble). =A0I&#39;m using Tomcat7, Struts2 2.3.15, and Shiro 1.2.2</div>

<div><br></div><div><br></div><div>I&#39;ve currently just got one action t=
hat grabs some database values and displays them. =A0I have shiro protectin=
g the namespace that action is in, I&#39;m using a very simple standard log=
in.jsp and the users are currently configured in the shiro.ini. =A0Log in w=
orks, redirects to the action, all is well.</div>

<div><br></div><div>But I&#39;m having trouble with a simple &quot;logout&q=
uot; link on the results page. I&#39;m trying to use the logout filter. =A0=
Here&#39;s my shiro.ini (comments removed):</div><div><br></div><blockquote=
 style=3D"margin:0 0 0 40px;border:none;padding:0px">
<div><div>
[main]</div></div><div><div>authc.loginUrl =3D /login.jsp</div></div><div><=
div>authc.successUrl =A0=3D /displayStudent</div></div><div><div>logout.red=
irectUrl =3D /logout.jsp</div></div><div><div><br></div></div><div><div>[ur=
ls]</div>
</div><div><div>login.jsp =3D ssl[8443], authc</div></div><div><div>
/logout =3D logout</div></div><div><div>/student/** =3D authc</div></div><d=
iv><div>/** =3D authc</div></div><div><div><br></div></div><div><div>[users=
]</div></div><div><div>admin=3Dhello</div></div><div><div>jill=3Dbob</div><=
/div>
</blockquote><div><br></div><div>(logout.jsp is just a placeholder so I cou=
ld see if the logout worked - in the end it willl redirect to login)<br></d=
iv>
<div><br></div><div>My link is:</div><blockquote style=3D"margin:0 0 0 40px=
;border:none;padding:0px"><div>&lt;a href=3D&quot;&lt;s:url action=3D&quot;=
logoutAction&quot;/&gt;&quot;&gt;LOGOUT&lt;/a&gt;</div></blockquote><div><b=
r>
</div><div>And the struts.xml action for that link is:</div><div><div>=A0 =
=A0 =A0 =A0&lt;action name=3D&quot;logoutAction&quot;&gt; =A0 =A0=A0</div>
<div>=A0 =A0 =A0 =A0 =A0 &lt;result&gt;/logout&lt;/result&gt;</div><div>=A0=
 =A0 =A0 =A0&lt;/action&gt;=A0</div></div><div><br></div><div>The error I&#=
39;m getting is your standard 404:</div><blockquote style=3D"margin:0 0 0 4=
0px;border:none;padding:0px">
<div><div>HTTP Status 404 - /b2mu-1.0/logout</div></div><div><div>type Stat=
us report</div></div><div><div>message /b2mu-1.0/logout</div></div><div><di=
v>description The requested resource is not available.</div></div></blockqu=
ote>
<div><br></div><div>And if I refresh the app I&#39;m redirected to the prot=
ected content (ie, I&#39;m still logged in). =A0So I&#39;m pretty sure the =
action is redirecting to the appropriate url, which should be caught by shi=
ro. =A0 Am I missing some logout filter configuration that I need?</div>
<div><br></div><div>Thanks!</div><div>Jillian</div></div>

--047d7bd6afe6c5e13704e1eb6603--