Examples of org.apache.shiro.subject.Subject.logout()

org.apache.shiro.subject.Subject.logout()
Logs out this Subject and invalidates and/or removes any associated entities, such as a {@link Session Session} and authorization data. After this method is called, the Subject isconsidered 'anonymous' and may continue to be used for another log-in if desired.
Web Environment Warning
Calling this method in web environments will usually remove any associated session cookie as part of session invalidation. Because cookies are part of the HTTP header, and headers can only be set before the response body (html, image, etc) is sent, this method in web environments must be called before any content has been rendered.
The typical approach most applications use in this scenario is to redirect the user to a different location (e.g. home page) immediately after calling this method. This is an effect of the HTTP protocol itself and not a reflection of Shiro's implementation.
Non-HTTP environments may of course use a logged-out subject for login again if desired.

        
        Subject.Builder builder = new Subject.Builder(securityManager);
        Subject currentUser = builder.buildSubject();
        UsernamePasswordToken token = new UsernamePasswordToken(username, plainTextPassword);
        currentUser.login(token);
        currentUser.logout();
    }
    
    @Test
    public void testUnSaltedWrongPassword() throws Exception {
        String testMethodName = name.getMethodName();

View Full Code Here

        Serializable firstSessionId = session.getId();


        session.setAttribute("key", "value");
        assertEquals(session.getAttribute("key"), "value");


        subject.logout();


        assertNull(subject.getSession(false));
        assertNull(subject.getPrincipal());
        assertNull(subject.getPrincipals());

View Full Code Here

        
        Subject.Builder builder = new Subject.Builder(securityManager);
        Subject currentUser = builder.buildSubject();
        UsernamePasswordToken token = new UsernamePasswordToken(username, plainTextPassword);
        currentUser.login(token);
        currentUser.logout();
    }
    
    @Test
    public void testSaltColumnWrongPassword() throws Exception {
        String testMethodName = name.getMethodName();

View Full Code Here

        assertTrue(subject.hasRole("goodguy"));


        assertNotNull(subject.getSession());
        assertFalse(firstSessionId.equals(subject.getSession().getId()));


        subject.logout();


        assertNull(subject.getSession(false));
        assertNull(subject.getPrincipal());
        assertNull(subject.getPrincipals());

View Full Code Here

        
        Subject.Builder builder = new Subject.Builder(securityManager);
        Subject currentUser = builder.buildSubject();
        UsernamePasswordToken token = new UsernamePasswordToken(username, plainTextPassword);
        currentUser.login(token);
        currentUser.logout();
    }
    
    @Test
    public void testExternalWrongPassword() throws Exception {
        String testMethodName = name.getMethodName();

View Full Code Here

        UserIdPrincipal userIdPrincipal = subject.getPrincipals().oneByType(UserIdPrincipal.class);
        assertTrue(userIdPrincipal.getUserId() == USER_ID);


        assertTrue(realm.hasRole(subject.getPrincipals(), ROLE));


        subject.logout();
    }


    public class TestActiveDirectoryRealm extends ActiveDirectoryRealm {


        /*--------------------------------------------

View Full Code Here

public class LogoutController extends AbstractController {


    protected ModelAndView handleRequestInternal(HttpServletRequest request, HttpServletResponse response) throws Exception {
        Subject subject = SecurityUtils.getSubject();
        if (subject != null) {
            subject.logout();
        }


        HttpSession session = request.getSession(false);
        if( session != null ) {
            session.invalidate();

View Full Code Here


    final Subject subject = SecurityUtils.getSubject();


    if (subject.isAuthenticated())
    {
      subject.logout();
      logger.info(String.format("Logout succeeded for %s", subject.getPrincipal()));
    }
  }


  public static boolean isAuthenticated()

View Full Code Here


    @After
    public void tearDown() throws Exception {
        Subject subject = SecurityUtils.getSubject();
        if(subject != null) {
            subject.logout();
        }
        SecurityUtils.setSecurityManager(null);
    }


    @Test

View Full Code Here

            
            // TODO: perhaps we should cache Isis' AuthenticationSession inside the Shiro Session, and
            // just retrieve it?
            
            // for now, just log them out.
            currentUser.logout();
        }
        try {
            currentUser.login(token);
        } catch ( UnknownAccountException uae ) { 
            LOG.debug("Unable to authenticate", uae);

View Full Code Here

0 1 2 3 4 5 6 7

TOP

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.

Examples of org.apache.shiro.subject.Subject.logout()

Web Environment Warning