spring security4 之 logout

来源：互联网发布：cnc编程可以自学吗编辑：程序博客网时间：2024/04/28 02:13

如果没有启用remember-me,直接配置一个 <security:logout logout-success-url="/" />，如果启用了remember-me，发现无法真正退出，所有重新这个过滤器

<security:custom-filter ref="logoutFilter" position="LOGOUT_FILTER" />

<security:csrf token-repository-ref="csrfTokenRepository" />

<bean id="logoutFilter" class="org.springframework.security.web.authentication.logout.LogoutFilter"><constructor-arg index="0" value="/login.html" /><constructor-arg index="1"><list><ref bean="rememberMeServices"/><bean class="org.springframework.security.web.csrf.CsrfLogoutHandler" ><constructor-arg index="0"><ref bean="csrfTokenRepository" /></constructor-arg></bean><bean class="org.springframework.security.web.authentication.logout.CookieClearingLogoutHandler"><constructor-arg index="0"><array><value>JSESSIONID</value><value>remember-me</value></array></constructor-arg></bean><bean class="org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler"/></list></constructor-arg></bean><bean id="csrfTokenRepository" class="org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository" />

完整源码下载

https://github.com/skyrocks/a-spring

0 0