Spring Security - Third Edition

Configuring logout

The HttpSecurity configuration of Spring Security automatically adds support for logging the user out. All that is needed is to create a link that points to /j_spring_security_logout. However, we will demonstrate how to customize the URL used to log the user out by performing the following steps:

1. Update the Spring Security configuration as follows:

        //src/main/java/com/packtpub/springsecurity/configuration/        SecurityConfig.java        http.authorizeRequests()        ...       .logout()       .logoutUrl("/logout")       .logoutSuccessUrl("/login?logout");

2. You have to provide a link for the user to click on that will log them out. We will update the header.html  file so that the Logout link appears on every page:

 //src/main/webapp/WEB-INF/templates/fragments/header.html ...