User deleting his own account IllegalStateException

[Kim A Kunc，修改在13 年前。]

My project requires users being able to delete their own accounts.

I created a portlet that deactivates the user and then deletes the user account.
I then want to invalidate his session and redirect him to the portal's main path.

This is what I do:

ThemeDisplay themeDisplay = (ThemeDisplay) request.getAttribute(WebKeys.THEME_DISPLAY);

String redirect = themeDisplay.getPathMain();
		
UserLocalServiceUtil.updateActive(currentUser.getUserId(), false);

try {

	UserLocalServiceUtil.deleteUser(currentUser);
			
	HttpServletRequest servletRequest = PortalUtil.getHttpServletRequest(request);
	HttpSession session = servletRequest.getSession();
	session.invalidate();
			
} catch (Exception e) {
   //	
}

response.sendRedirect(redirect);

However I end up with a blank page and an IllegalStateException:

javax.portlet.PortletException: Request processing failed...

Caused by: java.lang.IllegalStateException: setAttribute: Session already invalidated
at org.apache.catalina.session.StandardSession.setAttribute(StandardSession.java:1321)
at org.apache.catalina.session.StandardSession.setAttribute(StandardSession.java:1286)


Any suggestions are much appreciated !

I'm using the CE Edition 6.0.5 with Tomcat bundle.

[jelmer kuperus，修改在13 年前。]

1. You should delete the user with UserLocalServiceUtil.deleteUser(long userId) instead of with UserLocalServiceUtil.deleteUser(User user)

for some reason the liferay devs chose to override the method that takes a long to remove the user from the search index, delete a user's groep etc but they didn't do this for the method that accepts the group object


2. try redirecting to themeDisplay.getURLSignOut() instead of doing your session voodoo.

[Kim A Kunc，修改在13 年前。]

Hi Jelmer, thanks for your reply!

My user is now properly deleted. Works fine, thanks!

Problem now is the redirect. I've tried different approaches
forwarding to /c/portal/logout or to a jsp page that will then forward to somewhere else.

I had a look at com.liferay.portal.action.LogoutAction that should be called when I redirect to /c/portal/logout
but apparently the action is not processed. The user is never logged out correctly and I end up with a blank page ( no errors in the log)

btw, the same thing happens if the admin deletes a user in the control panel that still has a running session.

[Bharanidharan Viswanathan，修改在12 年前。]

Are you able to do this now ?