[ https://issues.jboss.org/browse/AS7-2746?page=com.atlassian.jira.plugin.s... ] Darran Lofthouse commented on AS7-2746: --------------------------------------- Technically not possible as you are never logged in. The issue is that the browser has cached the credentials to the server and is sending them each request when prompted. Firstly is there any way from GWT to tell it to stop sending this info? If not an alternative could be to simulate a failed authentication, that way the browser will believe it no longer has valid credentials to present. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://issues.jboss.org/browse/AS7-2746?page=com.atlassian.jira.plugin.s... ] Darran Lofthouse updated AS7-2746: ---------------------------------- Fix Version/s: 7.1.0.CR1 I am going to schedule this so I can investigate it further, the web browsers that I have available to me for testing are: - Firefox Internet Explorer Opera Safari Chrome The message that I am thinking of is described in the RFC for Digest i.e. I will reject the request and set stale to false - this is the RFC defined approach to indicate bad credentials. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://issues.jboss.org/browse/AS7-2746?page=com.atlassian.jira.plugin.s... ] Heiko Braun reassigned AS7-2746: -------------------------------- Assignee: Jason Greene (was: Darran Lofthouse) -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://issues.jboss.org/browse/AS7-2746?page=com.atlassian.jira.plugin.s... ] Jason Greene updated AS7-2746: ------------------------------ Priority: Blocker (was: Major) -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://issues.jboss.org/browse/AS7-2746?page=com.atlassian.jira.plugin.s... ] Heiko Braun reopened AS7-2746: ------------------------------ there is an issue with the LogoutHandler. I'll provide a patch ... -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://issues.jboss.org/browse/AS7-2746?page=com.atlassian.jira.plugin.s... ] Heiko Braun commented on AS7-2746: ---------------------------------- Aattched a reference to the pull that fixes the problem: https://github.com/jbossas/jboss-as/pull/1517 -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira