diff --git a/security.rst b/security.rst index f2bf94f9961..e136a571b88 100644 --- a/security.rst +++ b/security.rst @@ -1073,6 +1073,14 @@ key: Logging Out ----------- +.. caution:: + + Notice that when using http-basic authenticated firewalls, there is no + real way to log out : the only way to *log out* is to have the browser + stop sending your name and password on every request. Clearing your + browser cache or restarting your browser usually helps. Some web developer + tools might be helpful here too. + Usually, you'll also want your users to be able to log out. Fortunately, the firewall can handle this automatically for you when you activate the ``logout`` config parameter: @@ -1173,14 +1181,6 @@ is defined by the ``target`` parameter above (e.g. the ``homepage``). :class:`Symfony\\Component\\Security\\Http\\Logout\\LogoutSuccessHandlerInterface`. See :doc:`Security Configuration Reference `. -.. caution:: - - Notice that when using http-basic authenticated firewalls, there is no - real way to log out : the only way to *log out* is to have the browser - stop sending your name and password on every request. Clearing your - browser cache or restarting your browser usually helps. Some web developer - tools might be helpful here too. - .. _security-role-hierarchy: Hierarchical Roles