如何防止用户在退出系统后导航回 JSP 页面？

Question

Currently, I had invalidated session on the logout page and also clear the cache in the Main Menu. But it displays the HTTP Status 500 - Internal Server Error when I click the Back button.

How to keep displaying the login page since the session is invalidated instead of this error?

Mainmene.jsp
<%
    response.setHeader("Cache-Control","no-cache");
    response.setHeader("Cache-Control","no-store");
    response.setHeader("Pragma","no-cache");
    response.setDateHeader ("Expires", 0);

    if(session.getAttribute("email")==null) {
        response.sendRedirect("loginpage.jsp"); // GO TO LOGIN PAGE
        }
    %>


Logout.java
    protected void doPost(HttpServletRequest request, HttpServletResponse 
response)
        throws ServletException, IOException {

        response.setContentType("text/html");

        HttpSession session=request.getSession();  
        session.invalidate(); 

        response.sendRedirect("loginpage.jsp");

}

Answer 1

You can use a Filter that checks if there is a user object in the sessionScope and apply it to a given type of url-patterns . You can check here to see how to use.