clear browser credentials

[angelag]

Hallo all,

I have a problem when I try to make an url authentication from one side with two links pointing to the same url but with different userId and password parameters:

I have a html page with two links with e.g. the following urls:

<a href="#" onClick="window.open('http://url.com?login=userId1&password=password1>');return false;"></a>

<a href="#" onClick="window.open('http://url.com?login=userId2&password=password2>');return false;"></a>


when I click the first url, a new browser is opened and the authentication is done correctly. Afterwards I click the second link, a new window is then opened, but I see the page of the first user.
The second window inherits the credentials of the first window.

How can I obtain a right behaviour of the program?

Thank in advance,

Angela.

[nategrover]

This is almost certainly a result of your appserver's session management.

It is likely that your appserver uses cookies and your login processor may be bypassing the login if it detects a valid session in the cookie parameters. If you are not the login processor developer, talk to whoever built it and ask them what's going on.

Also, you may be getting redirected to somewhere after login and if the URL is identical regardless of login, your browser may be caching the page. If this is the case, try this header in the document that the login sends you to:

<meta HTTP-EQUIV="Pragma" CONTENT="no-cache">

Hope this helps.

[angelag]

Thank you for your answer!

I have only the control of my application. The links call an application extern to my side. I can not change anything on the extern application.

I have added the line
<meta HTTP-EQUIV="Pragma" CONTENT="no-cache">
in my pages as you recommended me, but I can not do it in the other application.
It has not worked.

would be possible to open a new browser instead to use the open.window method? In that case all the windows would be independent from each other.

Thanks again,

Angela.