tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Craig R. McClanahan" <craig...@apache.org>
Subject Re: Session.invalidate() not working
Date Wed, 09 Oct 2002 01:34:47 GMT
I answered this question yesterday.

The short answer is that it's not possible to portably log users off if
you're using BASIC authentication, because the browser keeps sending the
credentials (with every request)  until the user shuts down and restarts
their browser.

The answer is to use form-based login instead.

Craig


On Mon, 7 Oct 2002, Alex Imbastari wrote:

> Date: Mon, 7 Oct 2002 08:00:40 -0700 (PDT)
> From: Alex Imbastari <aimbastari_rr@yahoo.com>
> Reply-To: Tomcat Users List <tomcat-user@jakarta.apache.org>
> To: tomcat-user@jakarta.apache.org
> Subject: Session.invalidate() not working
>
> I'm using Tomcat 4.1 and I can't log off users via
> session.invalidate().  I'm using Basic Authentication.
> Can anyone help
>
> Thanks
> Alex
>
> __________________________________________________
> Do you Yahoo!?
> Faith Hill - Exclusive Performances, Videos & More
> http://faith.yahoo.com
>
> --
> To unsubscribe, e-mail:   <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
> For additional commands, e-mail: <mailto:tomcat-user-help@jakarta.apache.org>
>
>


--
To unsubscribe, e-mail:   <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-user-help@jakarta.apache.org>


Mime
View raw message