Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
i am develop an web app and in the authentication i need to delete the cookie JSESSIONID after a user makes logout.
Imagine this situation, i have multiple servers with the same war deployed and the user A make login in the the diferent servers.
When one of connected makes logout, other all should makes logout too. Soo, i need to remove all cookies to can do it (i think this will work).
thanks
Even if you remove the cookie, a new one will be created as soon as another JSP is hit (unless explicitly configured to not create a session).
Rather than relying on the presence of a session, use an object in the session to determine if a user is logged in or not.
Just invalidate the session. Don’t worry about the session cookie, or you’ll need to retrofit all your JSP pages that don’t require a login to not create a session, and remember to do that in perpetuity.