Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add Support for Clear Site Data on Logout

Browse Source 
Added an implementation of HeaderWriter for Clear-Site-Data HTTP
response header as welll as an implementation of LogoutHanlder
that accepts an implementation of HeaderWriter to write headers.

- Added ClearSiteDataHeaderWriter and HeaderWriterLogoutHandler
that implements HeaderWriter and LogoutHandler respectively
- Added unit tests for both implementations's behaviours
- Integration tests for HeaderWriterLogoutHandler that uses
ClearSiteDataHeaderWriter
- Updated the documentation to include link to
HeaderWriterLogoutHandler

Fixes gh-4187
This commit is contained in:
Rafiullah Hamedy
2019-02-22 00:38:50 -05:00
committed by Josh Cummings
parent 7739a0e91a
commit 82d527ed42
6 changed files with 450 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
docs/manual/src/docs/asciidoc/_includes/servlet/preface/java-configuration.adoc
View File

@@ -343,6 +343,7 @@ Various implementations are provided:
- {security-api-url}org/springframework/security/web/authentication/logout/CookieClearingLogoutHandler.html[CookieClearingLogoutHandler]
- {security-api-url}org/springframework/security/web/csrf/CsrfLogoutHandler.html[CsrfLogoutHandler]
- {security-api-url}org/springframework/security/web/authentication/logout/SecurityContextLogoutHandler.html[SecurityContextLogoutHandler]
- {security-api-url}org/springframework/security/web/authentication/logout/HeaderWriterLogoutHandler.html[HeaderWriterLogoutHandler]
Please see <<remember-me-impls>> for details.