Skip to main content
Participant
February 22, 2011
Answered

CFLOGOUT doesn't log out

  • February 22, 2011
  • 1 reply
  • 17543 views

If I do the following, the authorized user prints out on both lines.  Appears as if CFLOGOUT isn't working.

<cfoutput>Authorized user: #getAuthUser()#</cfoutput><BR/>

<cflogout>

<cfoutput>Authorized user: #getAuthUser()#</cfoutput><BR/>

The above code is in Logout.cfm, which is called when a logout link is clicked in the application.

Things are setup in the following way.  Digest Authentication is being used with Active Directory and IIS.  Session variables are turned on as well as loginStorage="session".   J2EE session variables are also enabled.

Here is the code, from application.cfc, used to login a user.

<CFFUNCTION name="onRequestStart">
  <CFARGUMENT NAME="targetPage" TYPE="String" REQUIRED=true/>


  <CFLOGIN>               
    <CFLOGINUSER name="#GetAuthUser()#" password="" roles="">
  </CFLOGIN>

</CFFUNCTION>

Thanks in advance,

Mike

    This topic has been closed for replies.
    Correct answer

    I don't have the answer to this, I just wonder if the fact that the two calls are

    back to back is causing a problem.  In other words, I wonder if calling getAuthUser() in another postback will correctly show no logged in user?

    1 reply

    Correct answer
    February 23, 2011

    I don't have the answer to this, I just wonder if the fact that the two calls are

    back to back is causing a problem.  In other words, I wonder if calling getAuthUser() in another postback will correctly show no logged in user?

    dichi6Author
    Participant
    February 23, 2011

    Good point.  I don't think it would be a problem, since I got the code from an Adobe sample.  Also, if I enter the app by directly typing in a URL, it shows me as still logged in.

    I wonder if using IIS Digest Authentication with jsession and loginStorage=session essentially keeps the user logged in until the browser is closed.