Spring Framework

In my previous tips, I showed you how to configure and setup Spring Security as well as the login form autogenerated when auto-config is set to true. In this tip, I will show you how to setup the logout for your application. Basically the <logout> element will setup a Spring Security filter that will invalidate a user session. If it is used as is, the filter set up by <logout> is mapped to /j_spring_security_ logout. In order to ensure that there is no collision with the DispatcherServlet, you must to override the filter’s URL much as we did for the login form. In order to that, you need to set the logout-url attribute:

Java Code:

<logout logout-url="/static/j_spring_security_logout"/>

That’s how you setup logging out. in my last tip, I will look at intercepting requests.