web - Spring Security 3.2.2 Logout Redirecting to Wrong Page -



web - Spring Security 3.2.2 Logout Redirecting to Wrong Page -

i have logout button created set , works, it's redirecting invalid-session-url reason. relevant bit of security.xml:

<http use-expressions="true"> <form-login login-page="/login" login-processing-url="/j_spring_security_check" default-target-url="/view" always-use-default-target="true" authentication-failure-url="/login?redirect=login_error" /> <logout logout-success-url="/login?redirect=logout" delete-cookies="jsessionid"/> <session-management invalid-session-url="/login?redirect=session_timeout" /> <intercept-url pattern="/login" access="isanonymous()" /> <intercept-url pattern="/**" access="isauthenticated()" /> </http>

not sure why happening. have session-timeout in web.xml set 5.

when logout first thing spring security invalidates session, invalid-session-url used. can set invalidate-session="false" on logout element or remove <session-management invalid-session-url="/login?redirect=session_timeout" />.

spring web spring-security

Comments

Post a Comment

Popular posts from this blog

ruby on rails - Devise Logout Error in RoR -

ruby on rails - Devise Logout Error in RoR - while using devise in ror, encountering unusual error when trying log out url different root url. displays me : actioncontroller::invalidauthenticitytoken in devise::sessionscontroller#destroy" for illustration if rooting path after log in '/structure', , seek log out '/general' error, while logging out '/structure' fine. any help highly appreciated. ruby-on-rails ruby devise
Read more

c# - Create a Notification Object (Email or Page) At Run Time -- Dependency Injection or Factory -

c# - Create a Notification Object (Email or Page) At Run Time -- Dependency Injection or Factory - i have code emails me notification when happens. trying add together page , also remove dependency on email. for reference; have name of notification want send stored string in database. @ runtime have list of people , string representation of want receive. i thought dependency injection ninject, kernel bindings got big , seemed hacking together. then thought simple factory, activator.createinstance(email/page) inotifcation, don't know how handle differing constructor parameters (unless utilize common, complex property, employee, has info need). so far have this: public interface inotification { void sendmessage(); } public class email: inotification { private readonly string _toemailaddress; private string body { { homecoming "email"; } } private static string smtphost { ...
Read more

model view controller - MVC Rails Planning -

model view controller - MVC Rails Planning - i'm starting rails , i'm building app stores films info, user can watch film , give grade on web application. i have coded cinema model, controller , views. now, have 2 questions: should need create model , controller grading? in case, should create or should wait , create first users model , controller? yes, on model , controller grades. that'd feasible way maintain track of who's graded what. it's create first, i'd start users, since grades depend on both films , users. ruby-on-rails model-view-controller
Read more