[jboss-user] [Security & JAAS/JBoss] - Logout from a WebService application

Hi, We have a Flex Client which communicates via WebServices. I wrote a custom LoginModule which performs the authentication. This works well without problems. But how to logout the user? The LoginModule has a logout() method but how should this be called? Do we need a WebService with a logout() method which delegates to the LoginModule? How to access the LoginModule in this case? The good thing with the LoginModule is, that it is transparent to the WebServices and Business-Logic but if we need an explicit logout() method this transparency is removed. Is there a preferred design for this? All examples I found are based on a standard Web-Application with Servlets which does not apply in this case. Regards, Markus View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4123965#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...