Fix logout in sample secure web applications

Fixes gh-1536
This commit is contained in:
Rob Baily
2015-03-25 09:13:07 -04:00
committed by Phillip Webb
parent a36d1e2eed
commit 3c50386970
6 changed files with 13 additions and 6 deletions

View File

@@ -71,7 +71,8 @@ public class SampleWebSecureApplication extends WebMvcConfigurerAdapter {
@Override
protected void configure(HttpSecurity http) throws Exception {
http.authorizeRequests().anyRequest().fullyAuthenticated().and().formLogin()
.loginPage("/login").failureUrl("/login?error").permitAll();
.loginPage("/login").failureUrl("/login?error").permitAll().and()
.logout().permitAll();
}
@Override

View File

@@ -13,7 +13,6 @@
Plain </a>
<ul class="nav">
<li><a th:href="@{/}" href="home.html"> Home </a></li>
<li><a th:href="@{/logout}" href="logout"> Logout </a></li>
</ul>
</div>
</div>
@@ -21,6 +20,9 @@
<div th:text="${message}">Fake content</div>
<div id="created" th:text="${#dates.format(date)}">July 11,
2012 2:17:16 PM CDT</div>
<form th:action="@{/logout}" method="post">
<input type="submit" value="Sign Out"/>
</form>
</div>
</body>
</html>