I created a login page and a welcome page trying to implement the authentication-authorization process. I used the managed bean approach with the doLogin and the onLogout methods. I'm aware that the browser caches authentication credentials according to "30.7.5 What You May Need to Know About ADF Servlet Logout and Browser Caching" in [http://www.art2dec.com/documentation/docs/fmw11g1115documentation/web.1111/b31974/adding_security.htm#BABDEICH]. How should i empty my cache everytime i logout in order to login again?
Thanks in advance.
The link you gave me is for basic authentication. I'm actually trying to use a form-based authentication with a login page. My application successfully logs out, it just doesn't re-authenticates users after the logout redirect.
The code itself is giving me an error:
Error(21,5): exception com.bea.common.security.xacml.IOException is never thrown in body of corresponding try statement
Error(23,20): unreported exception java.io.IOException; must be caught or declared to be thrown
And Even if it worked, i almost used the same code for form based authentication. But it didn't work.
This might helps you,
Put this action for logout...:) it works
ExternalContext ectx = FacesContext.getCurrentInstance().getExternalContext();
HttpServletRequest request = (HttpServletRequest)ectx.getRequest();
HttpSession session = request.getSession(false);
temp = request.getContextPath() + "";
Edited by: pavanlnt on Feb 26, 2013 1:08 AM