Re: Invalidating a session

2014-05-16 Thread Sanket Sharma
Thank you for the response everyone. Interesting..I never realised that myself :-) On Wed, May 14, 2014 at 9:37 PM, Thiago H de Paula Figueiredo < thiag...@gmail.com> wrote: > On Wed, 14 May 2014 11:02:24 -0300, Michael Gentry > wrote: > > Generally, yes, but sometimes you need access to metho

Re: Invalidating a session

2014-05-16 Thread Michael Gentry
Hi Thiago, I wasn't aware there could be additional consequences, so thanks for the information. mrg On Wed, May 14, 2014 at 3:37 PM, Thiago H de Paula Figueiredo < thiag...@gmail.com> wrote: > On Wed, 14 May 2014 11:02:24 -0300, Michael Gentry > wrote: > > Generally, yes, but sometimes you

Invalidating a session

2014-05-15 Thread Sanket Sharma
Hi, I'm trying to implement a logout page in my application that uses session state object. Going through documentation and mailing lists I found the only way to invalidate a session is calling the invalidate method not the session object. Since some of the responses on mailing lists date way back

Re: Invalidating a session

2014-05-15 Thread Thiago H de Paula Figueiredo
On Wed, 14 May 2014 11:02:24 -0300, Michael Gentry wrote: Generally, yes, but sometimes you need access to methods not available in Request. He asked specifically about session invalidation, which can and should be done in Tapestry's Session, so my answer is accurate. ;) In addition, in

Re: Invalidating a session

2014-05-14 Thread Michael Gentry
Generally, yes, but sometimes you need access to methods not available in Request. On Tue, May 13, 2014 at 8:09 AM, Thiago H de Paula Figueiredo < thiag...@gmail.com> wrote: > On Mon, 12 May 2014 11:04:40 -0300, Michael Gentry > wrote: > > Hi Sanket, >> >> We use: >> >> @Inject >> priv

Re: Invalidating a session

2014-05-13 Thread Thiago H de Paula Figueiredo
On Mon, 12 May 2014 11:04:40 -0300, Michael Gentry wrote: Hi Sanket, We use: @Inject private HttpServletRequest request; ... if (request.getSession(false) != null) request.getSession(false).invalidate(); However, since we also use an SSO, we have to remove all cookies

Re: Invalidating a session

2014-05-12 Thread Michael Gentry
Hi Sanket, We use: @Inject private HttpServletRequest request; ... if (request.getSession(false) != null) request.getSession(false).invalidate(); However, since we also use an SSO, we have to remove all cookies associated with the SSO, etc. mrg On Wed, May 7, 2014 at 3:31