Eclipse Community Forums: Eclipse Scout » Logout problem SCOUT+RAP

Home » Eclipse Projects » Eclipse Scout » Logout problem SCOUT+RAP(After logout and return to x.y.z/web user can't see login (basic auth tomcat))

Logout problem SCOUT+RAP [message #1295446]

Mon, 14 April 2014 05:16

Eclipse User

We have system that's deployed on Tomcat. First time if we go to http:\\x.y.z\web system is showing login dialog from tomcat. After login we go to File\Exit. System redirect us to http:\\x.y.z\res\logout.html. If we go directly to http:\\x.y.z\web, system don't show login, but we are directly in system....

Can please someone help me... I saw the problem is with RAP on Tomcat and filters...

Thanks

Re: Logout problem SCOUT+RAP [message #1298333 is a reply to message #1295446]

Wed, 16 April 2014 03:30

Eclipse User

Hi there

See this forum post http://www.eclipse.org/forums/index.php/m/1064181/ and especially the linked stack overflow post (http://stackoverflow.com/questions/2180206/how-to-force-jetty-to-ask-for-credentials-with-basic-authentication-after-invali).

The browser caches the login data and automatically sends them whenever the server requests them, as long as the browser is not closed. To avoid that you could implement the trick mentioned in the stack overflow post (in a custom basic auth filter): Make sure a new realm name is used whenever the session gets invalidated, e.g. by adding the timestamp to the real name. I haven't tried it but I think it should work.
The alternative is to use form authentication, but this will probably take more time.

Hope it helps
Claudio

Previous Topic:	problem with AbstractFileChooserField
Next Topic:	Logout problem SCOUT+RAP

Goto Forum:

-=] Back to Top [=-

Current Time: Sun Jul 20 18:23:31 EDT 2025

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter