My boss asked me for a login/logout track feature for all of our application. We'r using SSO and have only one application with and authentication form in it (our entry point). I wrote a LoginModule (extended from LoginModule and not AppservPasswordLoginModule). Everything works login, access restrictions, but when I try logout (using HttpSession.invalidade()) the current session is destroyed but the logout() method from my LoginModule isn't called. Is there any way to make it works or any other way to perform user logout?
[Message sent by forum member 'yellowbike' (yellowbike)]
http://forums.java.net/jive/thread.jspa?messageID=353596