[ 
https://issues.apache.org/jira/browse/FELIX-3006?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Valentin Valchev updated FELIX-3006:
------------------------------------
    Attachment: logout2.diff

Update the patch. The new one does the following things in addition:
1. doesn't invalidate the session. This will create problems if the session is 
implemented as cookies and the session attribute will be lost
2. use request.sendError instead of request.setStatus. Otherwise some browsers 
wait a lot before the login dialog appears.


Here is example situation for #1: session is invalidated & cookie is removed. 
Then new session is created and the attribute is set. However the browser 
doesn't set the cookie, because WWW-Authenticate is set. The next time when you 
open webconsole, a new session will be created because of missing cookie. That 
way the the session attribute is lost.

> Please create a logout button for the web console screen
> --------------------------------------------------------
>
>                 Key: FELIX-3006
>                 URL: https://issues.apache.org/jira/browse/FELIX-3006
>             Project: Felix
>          Issue Type: Improvement
>          Components: Web Console
>            Reporter: Susan Javurek
>         Attachments: FELIX-3006.diff, logout.diff, logout2.diff
>
>
> Please add a log out button on the web console to avoid sessions and cookies 
> being retained. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to