<%--
~ Licensed to the Apache Software Foundation (ASF) under one
~ or more contributor license agreements. See the NOTICE file
~ distributed with this work for additional information
~ regarding copyright ownership. The ASF licenses this file
~ to you under the Apache License, Version 2.0 (the
~ "License"); you may not use this file except in compliance
~ with the License. You may obtain a copy of the License at
~
~ http://www.apache.org/licenses/LICENSE-2.0
~
~ Unless required by applicable law or agreed to in writing,
~ software distributed under the License is distributed on an
~ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
~ KIND, either express or implied. See the License for the
~ specific language governing permissions and limitations
~ under the License.
--%>
<%@ include file="include.jsp" %>
<%
/*
NOTE: In a web application using 'rememberMe'
services via Cookies, always make sure you
call subject.login() and subject.logout()
_before_ any output is rendered to the
corresponding request/response.
Detailed description:
When a user logs out, any 'rememberMe' identity
should always be cleared. In a web application,
Shiro uses a cipher-encrypted Cookie to
remember a user's identity by default, and it will
automatically delete the Cookie upon a logout.
But deleting a Cookie is actually performed by
overwriting it with a new one with the same name
and a 'maxAge' of 0. And because Cookies are
sent out in the HTTP Header, the Cookie must be
deleted (overwritten) _before_ any HTML output
is rendered.
This means the following logout() call must
execute before the page is rendered, so we make
that call here at the very beginning of the file.
In proper MVC applications, the following logout()
call _should_ be in a Controller, never a JSP page.
But since this is a Quickstart app with minimal
libraries (no MVC frameworks), we do it here in
the page itself - but we would never do this if
writing a 'real' application.
*/
SecurityUtils.getSubject().logout();
%>
"/>
Log out
You have succesfully logged out. ">Return to the home page.