Home/ Questions/Q 7897665
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-03T08:13:29+00:00

I have web application deployed on websphere application server 7.0. User logins using /j_security_check.

  • 0

I have web application deployed on websphere application server 7.0. User logins using /j_security_check. When session timeout occures session ivnvalidates but request.getUserPrincipal() is still not null. I expect it should be null. How to clean user principal?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I have found solution in sphere documentation.

    1. In the administrative console, click Security > Global security.
    2. Under Custom properties, click New.
    3. In the Name field, enter com.ibm.ws.security.web.logoutOnHTTPSessionExpire.
    4. In the Values field, enter true.
    5. Click Apply and Save to save the changes to your configuration.
    6. Resynchronize and restart the server.
    • 0