Revision history [back]

This is all done by the spring-security self!

If it's well configurated the spring-security uses the users session that comes from the browser. The authentication is cleared immediatelly if you log out correctly. Otherwise it's cleared if the session is time out.

you can get at any place in the applications code the authentication object with this:

Authentication auth = SecurityContextHolder.getContext().getAuthentication();

best Stephan

PS: Have a look on ZKBoost. it's all in there.

This is all done by the spring-security self!

If it's well configurated the spring-security uses the users session that comes from the browser. The authentication is cleared immediatelly if you log out correctly.

SecurityContextHolder.clearContext();
Executions.sendRedirect("/j_spring_logout");

Otherwise it's cleared if the session is time out.

you can get at any place in the applications code the authentication object with this:

Authentication auth = SecurityContextHolder.getContext().getAuthentication();

best Stephan

PS: Have a look on ZKBoost. it's all in there.

This is all done by the spring-security self!

If it's well configurated the spring-security uses the users session that comes from the browser. The authentication is cleared immediatelly if you log out correctly.

SecurityContextHolder.clearContext();
Executions.sendRedirect("/j_spring_logout");

Otherwise it's cleared if the session is time out.

you can get at any place in the applications code the authentication object with this:

Authentication auth = SecurityContextHolder.getContext().getAuthentication();

best Stephan

PS: Have a look on ZKBoost. ZKBoost. it's all in there.