If you're using FORM authentication, simply destroy the user Session, and you will be logged out.
If you're using BASIC authentication, then all you can do is close the browser.
With FORM, the authentication token is stored on the server in the session, so it's easy. But with BASIC, it's actually stored in the browser, and there's not standard way to tell the Browser to remove the authentication.
[Message sent by forum member 'whartung' (whartung)]
http://forums.java.net/jive/thread.jspa?messageID=298915