From: <glassfish_at_javadesktop.org>
Date: Sun, 21 Jun 2009 21:53:08 PDT
To invalidate the user, in servlet 3.0, HttpServletRequest.logout() could be used. This resets the caller identity of the request.
HTH
Nithya
[Message sent by forum member 'nitkal' (nitkal)]