Re: [Acegisecurity-developer] session.invalidate() vs. ContextHolder.setContext(null)

2005-03-10 Thread Andreas Brenk
You could use a HttpSessionListener to keep the coupling to Acegi Security separate from your controller. See http://forum.springframework.org/viewtopic.php?t=1106 for an earlier discussion. Perhaps this should be mentioned in the upgrade readme. Regards, Andreas Matt Raible wrote: With Acegi

Re: [Acegisecurity-developer] FilterChainProxy and ContextHolderAwareRequestFilter

2005-03-10 Thread Ben Alex
Matt Raible wrote: I changed both of the places where fi.getRequest() was called. Changing the first one didn't affect anything, but changing the second seems to have solved the problem. Here's the modified file: Checked into CVS. Cheers Ben

Re: [Acegisecurity-developer] session.invalidate() vs. ContextHolder.setContext(null)

2005-03-10 Thread Ben Alex
Matt Raible wrote: Ben Alex wrote: It seems to work OK for me in Tomcat 5.5 with the Contacts Sample application's logout.jsp. I tried building/deploying the contacts WAR with maven (according to the Building with Maven instructions) - there is no web.xml included in the WAR file. Matt You