Win a copy of Node.js Design Patterns: Design and implement production-grade Node.js applications using proven patterns and techniques this week in the Server-Side JavaScript and NodeJS forum!
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other Pie Elite all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Ron McLeod
  • Rob Spoor
  • Tim Cooke
  • Junilu Lacar
Sheriffs:
  • Henry Wong
  • Liutauras Vilda
  • Jeanne Boyarsky
Saloon Keepers:
  • Jesse Silverman
  • Tim Holloway
  • Stephan van Hulst
  • Tim Moores
  • Carey Brown
Bartenders:
  • Al Hobbs
  • Mikalai Zaikin
  • Piet Souris

session invalidating for sso users.

 
Ranch Hand
Posts: 17424
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Hi ,

I am new to JForum ....
am successful in integrating sso with my web app ....

have a doubt ...

if applicaiton user does'nt exist in JForum it tries to login as guest ....
(or we can tweak it to register to JForum ) ....

My question here is ..when I logout of my application ...how do i invalidate the session created for the app user in JForum ???.....

My application structure looks kinda like this


App.ear / web.war
App.ear / Jforum.war

Thanks,

Kurt.

[originally posted on jforum.net by kurtcobain]
 
Migrated From Jforum.net
Ranch Hand
Posts: 17424
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
I'm not sure you need to worry about the webapp Session invalidation.

Each jForum request goes thru the ControllerUtils.refreshSession() method. With SSO, this will call the SSO.isSessionValid(UserSession, request) method. This is where you should verify that the existing jForum UserSession is valid for your SSO conditions or no (e.g., does the SSO cookie say it's a different user?)
[originally posted on jforum.net by monroe]
 
Consider Paul's rocket mass heater.
reply
    Bookmark Topic Watch Topic
  • New Topic