有没有办法从数据库中注销特定用户或所有用户？

Question

I am using grails 2.2 with spring security. I am using MYSql for database. I am wondering whether there is a way to logout a user or all users by clearing data in mysql database.

Answer 1

I am wondering whether there is a way to logout a user or all users by clearing data in mysql database.

There isn't. The state that represents whether a user is logged in or not generally does not even exist in the database. In a simple system that information would live in memory in the web app. In a more sophisticated system that information might live in a separate service that the app communicates with. That information generally would not be stored in the database.

Note that storing credentials like user names, passwords and roles in the database is a separate thing than keeping track of who is logged in.

I hope that helps.

Answer 2

If you delete the data in your DB, the users will not be able to login the NEXT TIME.

If any current sessions are open, the users will remain logged-in, and there's no out-of-box mechanism in Spring Security to end session of specific users.

Answer 3

如果安装JavaMelody （有时可以作为grails插件使用），则应该能够看到所有活动的会话，并且可以从界面中将其删除（这将导致所有用户注销）。

Answer 4

You can't do exactly what you asked because the data is not stored in your application database, as JSB said.

You can however inspect the sessions from your webapp and invalidate some of them, which will "logout" the associated user(s). I wrote a service and controller based on the old " app-info " plugin and the "scopesInfoService". See the source and the blog .

If you need a quick fix, and are deployed to Tomcat, try using the manager webapp to invalidate sessions for your webapp, although it may be tricky determining which sessions to choose if you are not already explicitly adding the username (or another identifying string) to the session 'Login' attribute upon auth success.