Bug : LogoutFilter return a 404 on Websphere 6.0.2

Environment:  Windows Xp + Websphere 6.0.2.0 + IBM JDK/JRE 1.4.2
Description: When I click logout.jsp, it returns a 404.

However, acegi sample app logouot work on websphere 6.0.2

Matt suggest the following temp solution:

Remove logoutFilter from security.xml (as a bean definition and in the filterChain) and
replace it with a web/logout.jsp page that has the following:
<%@ include file="/common/taglibs.jsp"%>
<%@ page import="javax.servlet.http.Cookie" %>
<%@ page import="org.acegisecurity.ui.rememberme.TokenBasedRememberMeServices"
%>

<%
session.invalidate();
Cookie terminate = new
Cookie(TokenBasedRememberMeServices.ACEGI_SECURITY_HASHED_REMEMBER_ME_COOKIE_KEY,
null);
terminate.setMaxAge(0);
response.addCookie(terminate);
%>

<c:redirect url="/mainMenu.html"/> 

你可能感兴趣的:(jsp,XP,Security,websphere,Acegi)