[ https://issues.apache.org/jira/browse/FELIX-3006?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Valentin Valchev updated FELIX-3006: ------------------------------------ Attachment: logout2.diff Update the patch. The new one does the following things in addition: 1. doesn't invalidate the session. This will create problems if the session is implemented as cookies and the session attribute will be lost 2. use request.sendError instead of request.setStatus. Otherwise some browsers wait a lot before the login dialog appears. Here is example situation for #1: session is invalidated & cookie is removed. Then new session is created and the attribute is set. However the browser doesn't set the cookie, because WWW-Authenticate is set. The next time when you open webconsole, a new session will be created because of missing cookie. That way the the session attribute is lost. > Please create a logout button for the web console screen > -------------------------------------------------------- > > Key: FELIX-3006 > URL: https://issues.apache.org/jira/browse/FELIX-3006 > Project: Felix > Issue Type: Improvement > Components: Web Console > Reporter: Susan Javurek > Attachments: FELIX-3006.diff, logout.diff, logout2.diff > > > Please add a log out button on the web console to avoid sessions and cookies > being retained. -- This message was sent by Atlassian JIRA (v6.3.4#6332)