bug fix - the Shiro logout handler has to be before the SecurityContextLogoutHandler since both invalidate the session, but only SecurityContextLogoutHandler checks that it's ok to do so
bug fix - the Shiro logout handler has to be before the SecurityContextLogoutHandler since both invalidate the session, but only SecurityContextLogoutHandler checks that it's ok to do so

grails-plugins/grails-spring-security-shiro