session management in logout

8 replies
3154 views
Translate

Hi friends

can you please tell me how to do session management in logout process in AEM 6.5, i have a login credential now i want to make logout with session, please suggest me.

Thanks

Dhiraj Kumar

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

vanegiAccepted solution

Employee

You can look at Encapsulated Tokens [0]. For this, the users must pre-exist on all the publish instances, if this is not possible, then you should use sticky connections.

To close the session, you can use session.logout(), check [1].

[0]: https://docs.adobe.com/content/help/en/experience-manager-65/administering/security/encapsulated-token.html#stateless-authentication-with-the-encapsulated-token

[1]: https://helpx.adobe.com/in/experience-manager/kb/check-and-analyze-if-JCR-session-leaks-in-your-AEM-instance.html

joerghoh

Employee

Hi,

can you please describe what you mean with "session logout" in more detail? The term "session" can describe a lowlevel implementation API, which does have a logout method. On the other hand side it can also mean the session of a user, which has authenticated against an AEM authoring instance and is working, until he logs out (and cannot visit the UI of that authoring instance until he logs in again).

Dependent on that the answer is quite different 🙂

Translate

BrianKasingli

New Participant

Assuming that you have the Session a valid non-null object, you can easily just call the logout method. Example Below:

if (session != null && session.isLive()) {
     session.logout();
}

But it really depends on the context. How is the session obtained?

Translate

Nupur_Jain

Employee

Hi @dhiraj85

To logout, you can use session.logout() method of JCR Session API. Refer https://www.programcreek.com/java-api-examples/?class=javax.jcr.Session&method=logout for eaxmples.

Hope it helps!

Thanks,

Nupur

Translate

D

dhiraj85Author

Level 2

Hi nupur

is this helpful in AEM?, because of i am new in AEM so i am getting confuse, it seem as java session management .

Translate

vanegiAccepted solution

Employee

You can look at Encapsulated Tokens [0]. For this, the users must pre-exist on all the publish instances, if this is not possible, then you should use sticky connections.

To close the session, you can use session.logout(), check [1].

[0]: https://docs.adobe.com/content/help/en/experience-manager-65/administering/security/encapsulated-token.html#stateless-authentication-with-the-encapsulated-token

[1]: https://helpx.adobe.com/in/experience-manager/kb/check-and-analyze-if-JCR-session-leaks-in-your-AEM-instance.html

Translate