Bug : LogoutFilter return a 404 on Websphere 6.0.2

Environment:  Windows Xp + Websphere 6.0.2.0 + IBM JDK/JRE 1.4.2
Description: When I click logout.jsp, it returns a 404.

However, acegi sample app logouot work on websphere 6.0.2

Matt suggest the following temp solution:

Remove logoutFilter from security.xml (as a bean definition and in the filterChain) and
replace it with a web/logout.jsp page that has the following:

<%@ include file="/common/taglibs.jsp"%>
<%@ page import="javax.servlet.http.Cookie" %>
<%@ page import="org.acegisecurity.ui.rememberme.TokenBasedRememberMeServices"
%>

<%
session.invalidate();
Cookie terminate = new
Cookie(TokenBasedRememberMeServices.ACEGI_SECURITY_HASHED_REMEMBER_ME_COOKIE_KEY,
null);
terminate.setMaxAge(0);
response.addCookie(terminate);
%>

<c:redirect url="/mainMenu.html"/> 

评论

1 楼 just4you 2008-11-24  

是不是在web.xml中没有写
<filter-mapping>
<filter-name>securityFilter</filter-name>
<url-pattern>/j_acegi_logout</url-pattern>
</filter-mapping>
的问题呢？