BC4J/UIX: How to implement session timeout and logout?

Question

Hi,
I need to implement logout function in my UIX application. We use JAZN basic authentication. So several things need to be done when user clicks 'logout'
1. Any pending transaction is rolled-back.
2. App Module - what to do with it?
3. Browser closes or redirects to other page. Any attempts to go BACK will show either 'session expired' or will redirect to login page.
Also I need a mechanism where if user is idle for say, 10 minutes, that he/she will be automatically logout (maybe after some warning message). How to do this?
Thanks
Rade

Answer 1

Well if you search long enough, you will find your own answers. After months of not having this solved, I found the solution, in a piece of sample code from oracle that is distro with the OC4J stuff.
if (request.getRemoteUser() != null) {
     // notes that the application is responsible for cleanup
     //invalidate the HttpSession
     HttpSession session = request.getSession();
     session.invalidate();
     String url=null;
     oracle.security.jazn.oc4j.WebSSOUtil.globalLogout(response,url);
     } else      out.println("You are not logged in!");
     out.println("</BODY>");
     out.println("</HTML>");
This is the piece I was looking for, a way to kill off the SSO session. Now when I click logoff, the user is actually logged off the application and their HTTP session is killed off as well.
Kelly