[CAUSEWAY-299] Document the logout action. (Was: Extend the authentication API so that can explicitly logout session.)

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: viewer-wicket-1.0.0, security-shiro-1.0.0, core-1.0.0
• Fix Version/s: 2.0.0-M6
• Component/s: Core
• Assignee: Daniel Keir Haywood
• Reporter: Daniel Keir Haywood
• Created: 13/Jan/13 15:36
• Updated: 25/Aug/21 14:32
• Resolved: 02/Jun/21 10:41

Description

Andi addressed this in M5, but it isn't documented yet.

At any rate, we now have an actual action that will logout the session; this is our formal API.

 

~~~~~~~~

Currently the wicket viewer's logout button merely invalidates the wicket session, but does not invalidate the shiro session because there is no API to do so.

This ticket is to provide API for this, and implement in both shiro and wicket.

Should explore the 55minutes' ShiroWicketPlugin to see how it works...