diff --git a/docs/modules/ROOT/pages/reactive/authentication/logout.adoc b/docs/modules/ROOT/pages/reactive/authentication/logout.adoc index 0d4137d1081..ff982cf0dca 100644 --- a/docs/modules/ROOT/pages/reactive/authentication/logout.adoc +++ b/docs/modules/ROOT/pages/reactive/authentication/logout.adoc @@ -11,7 +11,8 @@ This will: Often, you will want to also invalidate the session on logout. To achieve this, you can add the `WebSessionServerLogoutHandler` to your logout configuration, like so: -[source,java] +.Java +[source,java,role="primary"] ---- @Bean SecurityWebFilterChain http(ServerHttpSecurity http) throws Exception { @@ -26,3 +27,23 @@ SecurityWebFilterChain http(ServerHttpSecurity http) throws Exception { return http.build(); } ---- + +.Kotlin +[source,kotlin,role="secondary"] +---- +@Bean +fun http(http: ServerHttpSecurity): SecurityWebFilterChain { + val customLogoutHandler = DelegatingServerLogoutHandler( + WebSessionServerLogoutHandler(), SecurityContextServerLogoutHandler() + ) + + return http { + authorizeExchange { + authorize(anyExchange, authenticated) + } + logout { + logoutHandler = customLogoutHandler + } + } +} +----