changing spring security logout-success-url programmatically -
i need redirect user 2 different logout urls based on role. how go doing this?
i using spring security 2.0 , xml looks this:
<s:http access-denied-page="/" > <s:intercept-url pattern="/pages/splashpage.jsf" access="is_authenticated_anonymously"/> <s:intercept-url pattern="/pages/home.jsf" access="role_user,role_merchant"/> <s:anonymous/> <s:form-login login-page="/" login-processing-url="/j_spring_security_check" default-target-url="/pages/home.jsf" authentication-failure-url="/" always-use-default-target='false' /> <s:logout invalidate-session="true" logout-url="/pages/logout.jsf" logout-success-url="/" /> <s:concurrent-session-control max-sessions="1" exception-if-maximum-exceeded="false"/> </s:http>
i couldnt find right way this, ended hack:
- dont
invalidate-session
- change
logout-success-url
special redirect controller - in controller, pull user session tell user type
- invalidate session
- redirect proper url usertype
Comments
Post a Comment