how to code in java for logout

Question

here is my code :

 protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
       HttpSession session = request.getSession(false);
      if (session != null) {
            session.removeAttribute("FirstName");
            session.removeAttribute("pwd");

            session.invalidate();
      }
           response.sendRedirect("index.html");
    }

    }

After this what can i do ? Any help would be appreciated ........

Seems to be a duplicate of [this SO article](http://stackoverflow.com/questions/10893727/how-to-properly-logout-of-a-java-ee-6-web-application-after-logging-in) — Tim Biegeleisen, Mar 27 '15 at 06:46
map this servlet to an url in your web.xml...and btw session.invalidate() will remove all your attributes, no need to remove singles. Another note....saving the 'pwd' ina session attribute is as well a bad security practice! — DavidC, Mar 27 '15 at 09:46

score 0 · Accepted Answer · edited Apr 21 '15 at 20:02

I think it would be better to logout using Cookies..Code for Cookies is :

Cookie loginCookie = null;
Cookie[] cookies = request.getCookies();
if(cookies != null) {
   for(Cookie cookie : cookies){
      if(cookie.getName().equals("uid")){
         loginCookie = cookie;
         break;
      }
   }
}
if(loginCookie != null){
   loginCookie.setMaxAge(0);
   response.addCookie(loginCookie);
}
response.sendRedirect("index.html");

how to code in java for logout

1 Answers1