简体   繁体   English

在Play框架中注销后,如何防止用户返回上一个安全页面?

[英]How to Prevent user from going back to the previous secured page after logout in play framework?

I am developing a simple web application using play framework with java and i am doing 我正在使用Java的play框架开发一个简单的Web应用程序,我正在做

  1. Login 登录
  2. Logout 登出
  3. user info page 用户信息页面

i developed that web app but i am getting problem 我开发了该网络应用程序,但遇到了问题

Problem : 问题

After clicking of logout link of my web app i am redirecting to login page but if user click on back button of browser then it is going back in secure page that i don't want. 单击我的Web应用程序的logout链接后,我将重定向到login页面,但是如果用户单击浏览器的后退按钮,则它将返回我不想要的安全页面

Also used session but on logout i am calling controller : 也使用session但注销时我正在调用控制器

public static void noCache(final Response response) {

        response.setHeader("Cache-Control",
                "no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0"); // HTTP 1.1
        response.setHeader("Pragma", "no-cache"); // HTTP 1.0.
        response.setHeader("EXPIRES", "0"); // Proxies

    }

    public static Result logou() {
        session().clear();

        flash("success", Messages.get("youve.been.logged.out"));
        noCache(response());

        return redirect(routes.signin.page());
    }

logout link: 注销链接:

<a href="@routes.signin.logou">Logout</a>

but it is going back and showing user info. 但它会返回并显示用户信息。

actually my web application is storing cache when user click on back button it is calling cached copy that's why i called noCache method but still is not working 实际上,当用户单击“后退”按钮时,我的Web应用程序正在存储缓存,它正在调用缓存的副本,这就是为什么我调用了noCache方法但仍然无法正常工作的原因

Give me some idea to solve this issue? 给我一些解决这个问题的想法?

Jsp page add the code 在jsp页面添加代码

<%
    response.setHeader("Cache-Control","no-cache"); //HTTP 1.1
    response.setHeader("Pragma","no-cache"); //HTTP 1.0
    response.setHeader("Cache-Control","no-store");
    response.setDateHeader ("Expires", 0);
%>
<%@ page language="java" contentType="text/html; charset=ISO-8859-1"  pageEncoding="ISO-        8859-1"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"      "http://www.w3.org/TR/html4/loose.dtd">

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

相关问题 如何防止用户在退出系统后导航回 JSP 页面? - How to prevent user navigate back to a JSP page after logout from the system? 如何防止用户“退回”但在JSP注销后保留缓存? - How do I prevent users from going 'back' but retain the cache after a logout in JSP? 阻止用户在登录后返回登录表单以及在注销后返回会话页面? - Prevent user from going back to login form after logging-in and session pages after logging-out? 从循环中的页面返回后的 StaleElement - StaleElement after going back from a page in a loop Android禁止返回以前的活动 - Android prevent going back to previous activities 注销后,当用户单击“后退”按钮时,停留在同一页面上 - After logout stay on same page when user clicks on back button 为什么退出后点击页面上的后退按钮显示上一页内容? - Why after logout clicking back button on the page displays previous page content? 在android中注销后防止后退按钮 - Prevent back button after logout in android 注销应用程序后如何防止用户访问历史记录 - How to prevent the user to access the history after logout the application 用户登录jsp servlet后防止返回登录页面 - prevent back to login page after user is logged in jsp servlet
 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM