Which JAR contains the weblogic.servlet.security.ServletAuthentication class?

Question

I trying to create a servlet to logout from multiple JSF applications running on Oracle Glassfish. I tried the following code,

weblogic.servlet.security.ServletAuthentication.logout(request);
weblogic.servlet.security.ServletAuthentication.invalidateAll(request);
weblogic.servlet.security.ServletAuthentication.killCookie(request);

but I am not able to find the JAR file containing the required class in order to get the code to compile. I downloaded Oracle WebLogic and tried various of its JARs, but no one of them made the code to compile.

Which JAR does contain the required class and where can I find it?

Solution

The class you are looking for is in a jar named wls-api.jar.

However, you're probably searching for the wrong thing because if you are developing applications to run on Glassfish you should stick with the standard techniques (e.g. JSR-196 described here or here).

Because it isn't obvious what you are trying to implement I can't give any further detailed advice but there is plenty of documentation available about Java EE Security.

Comments

[user2240516]

Hi Thanks, I understand what you mean to say, can you provide me example how to completely logout as i figured out session.invalidate is not actually logging out user...can you please post a code if you have it for logout and session expiry...thanks in advance

[unwichtich]

This depends on the code you already have, especially how you do your login. I guess it would be better to update your question (or create a new one) with some sample code how the login is done so people can analyze and show you a way to do the logout...

[user2240516]

Hi tell you more about my code...that when I run my application an alert pops up from glassfish server and asks for username and password..please let me know how to completely logout in this case.

[user2240516]

I am using file realm authentication...help for logout..how to logout even i destroyed the session but nothing seems to work..after first login server no more asking to login next time for authentication.