我是春季安全新手。我在春季安全3中创建了一个示例。春季安全3注销不起作用
我正面临一个问题。我能够使用默认的登录页面登录成功,但是当我退出,我成功地重定向到我的loggedout.jsp但是当检查与改变URL我看到,我还是登录
春季security.xml
:
<beans:beans xmlns="http://www.springframework.org/schema/security"
xmlns:beans="http://www.springframework.org/schema/beans"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/beans
http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
http://www.springframework.org/schema/security
http://www.springframework.org/schema/security/spring-security-3.1.xsd">
<http pattern="/loggedout.jsp" security="none" />
<http auto-config='true'>
<intercept-url pattern="/**" access="ROLE_USER" />
<logout logout-success-url="/loggedout.jsp" invalidate-session="true"
delete-cookies="JSESSIONID" />
<!-- <remember-me key="myAppKey" /> -->
<!-- <session-management invalid-session-url="/timeout.jsp">
<concurrency-control max-sessions="1"
error-if-maximum-exceeded="true" />
</session-management> -->
</http>
<authentication-manager>
<authentication-provider>
<user-service>
<user name="vrajesh" password="vrajesh"
authorities="ROLE_USER,ROLE_ADMIN" />
<user name="test" password="test"
authorities="ROLE_USER,ROLE_ADMIN" />
</user-service>
</authentication-provider>
</authentication-manager>
<!--
<http pattern="/loggedout.jsp" security="none"/>
<http use-expressions="true">
<intercept-url pattern="/**" access="ROLE_USER" />
<form-login />
<logout logout-success-url="/loggedout.jsp"
delete-cookies="JSESSIONID"/>
<remember-me />
<session-management invalid-session-url="/timeout.jsp">
<concurrency-control max-sessions="1"
error-if-maximum-exceeded="true" />
</session-management>
</http>
-->
</beans:beans>
这是每一个页面上我的退出链接:
<p><a href="j_spring_security_logout">Logout</a></p>
,这是我loggedout.jsp
:
<p>
You have been logged out. <a href="<c:url value='/'/>">Start again</a>.
</p>
在我的loggedout.jsp
,如果我点击'重新开始'链接,它应该显示登录页面,但它不。相反,我登录了应用程序。
请帮助我,让我知道我是否缺少任何东西。
请修复您发布的HTML,并澄清您正在运行的实际配置文件。另请说明“重新开始”导致的链接。你有没有启用DEBUG日志? –
您是否确认您仍然登录到应用程序,而不只是看到该页面的浏览器缓存版本? – atrain