D-Net

import java.io.IOException;

import java.security.Principal;

import java.util.UUID;

import javax.servlet.http.Cookie;

import javax.servlet.http.HttpServletResponse;

import org.apache.commons.io.IOUtils;

import org.springframework.http.HttpStatus;

import org.springframework.web.bind.annotation.CookieValue;

	private static final String TEMPORARY_AUTH_CODE = "TEMP_COOKIE";

	@RequestMapping(value = "/", method = RequestMethod.GET)

	public void logout(@CookieValue(name = "auth_code", required = false) final String authCode, final HttpServletResponse res, final Principal principal)

			throws IOException {

		res.setContentType("text/html");

		if (authCode == null) {

			res.addCookie(new Cookie("auth_code", TEMPORARY_AUTH_CODE));

			IOUtils.copy(getClass().getResourceAsStream("/templates/redirect.html"), res.getOutputStream());

		} else if (authCode.equals(TEMPORARY_AUTH_CODE) || principal == null) {

			res.setStatus(HttpStatus.UNAUTHORIZED.value());

			res.setHeader("WWW-Authenticate", "Basic realm=\"Realm\"");

			res.setHeader("X-Content-Type-Options", "nosniff");

			res.setHeader("X-XSS-Protection", "1; mode=block");

			res.setHeader("Cache-Control", "no-cache, no-store, max-age=0, must-revalidate");

			res.setHeader("Pragma", "no-cache");

			res.setHeader("Expires", "0");

			res.setHeader("X-Frame-Options", "DENY");

			final Cookie cookie = new Cookie("auth_code", UUID.randomUUID().toString());

			cookie.setMaxAge(-1);

			res.addCookie(cookie);

			IOUtils.copy(getClass().getResourceAsStream("/templates/redirect.html"), res.getOutputStream());

		} else {

			IOUtils.copy(getClass().getResourceAsStream("/templates/home.html"), res.getOutputStream());

		}

	}