CFLOGOUT doesn't log out

[dichi6]

If I do the following, the authorized user prints out on both lines.  Appears as if CFLOGOUT isn't working.

<cfoutput>Authorized user: #getAuthUser()#</cfoutput><BR/>

<cflogout>

<cfoutput>Authorized user: #getAuthUser()#</cfoutput><BR/>

The above code is in Logout.cfm, which is called when a logout link is clicked in the application.

Things are setup in the following way.  Digest Authentication is being used with Active Directory and IIS.  Session variables are turned on as well as loginStorage="session".   J2EE session variables are also enabled.

Here is the code, from application.cfc, used to login a user.

<CFFUNCTION name="onRequestStart">
  <CFARGUMENT NAME="targetPage" TYPE="String" REQUIRED=true/>

  <CFLOGIN>               
    <CFLOGINUSER name="#GetAuthUser()#" password="" roles="">
  </CFLOGIN>

</CFFUNCTION>

Thanks in advance,

Mike

[brambilaa · Accepted solution]

I don't have the answer to this, I just wonder if the fact that the two calls are

back to back is causing a problem.  In other words, I wonder if calling getAuthUser() in another postback will correctly show no logged in user?

[dichi6]

Good point.  I don't think it would be a problem, since I got the code from an Adobe sample.  Also, if I enter the app by directly typing in a URL, it shows me as still logged in.

I wonder if using IIS Digest Authentication with jsession and loginStorage=session essentially keeps the user logged in until the browser is closed.