[Zope] kill user Session
vaibhav pol
vaibhav4947 at gmail.com
Wed Sep 17 09:54:09 EDT 2008
Hi,
Thank you for your quick replay. I am using CookieCrumbler product
which does cookie based authentication. The product modify the client
request and server response but when user want to log out it calling the
"manage_zmi_logout" functaion which pass basic authenticate in response
header that's why it calling login window . I don't want to show any
window and also i want to fully logout user from zope is any way to do
that .
Thank and Regards,
vaibhi
On Wed, Sep 17, 2008 at 6:58 PM, Tino Wildenhain <tino at wildenhain.de> wrote:
> vaibhav pol wrote:
>
>> Dear all,
>> I create logout page in my site when user want to logout it will
>> submit the page of page submit i called "manage_zmi_logout" function .
>> which promt me for again login user name password window i want redirect
>> user to login page but if redirect whiout calling "manage_zmi_logout"
>> function user not actualy logout from zope is any other way to kill user
>> session please tell me.
>>
>
> Is there a question somewhere?
>
> Looks like you are trying to log out a "basic auth". This is not
> really possible - the protocol has nothing to support it.
> What zope does is using a dirty trick - most browsers expire
> sending the auth header when they get a 401 response (look up your
> copy of rfc2616).
>
> What you probably want is to use a cookie based authorization.
>
> Did you already explore zope PAS?
>
> Cheers
> Tino
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.zope.org/pipermail/zope/attachments/20080917/a025aa13/attachment.html
More information about the Zope
mailing list