cookies logout
We have our site hooked up to use cookie authentication and logging in seems to work. Logging out, however, is not working. Tender says that in order to logout, the user must logout of the main apps site. When I do that, and refresh tender, I'm still logged in. If I try to login as someone else, I get stuck logged in as that user instead.
The only way I've been able to logout so far is to manually remove the tender sites cookies.
Discussions are closed to public comments.
If you need help with Tender please
start a new discussion.
Keyboard shortcuts
Generic
? | Show this help |
---|---|
ESC | Blurs the current field |
Comment Form
r | Focus the comment reply box |
---|---|
^ + ↩ | Submit the comment |
You can use Command ⌘
instead of Control ^
on Mac
1 Posted by Kyle Neath (Git... on 07 Jan, 2009 01:31 AM
Removing the cookies is the intended way to log someone out of Tender. What you'll need to do is modify the logout action of your application to delete the tender cookies as well as your application cookies.
Kyle Neath (GitHub Staff) closed this discussion on 07 Jan, 2009 01:31 AM.
bdericks re-opened this discussion on 07 Jan, 2009 02:31 AM
2 Posted by bdericks on 07 Jan, 2009 02:31 AM
I'm sorry. My original post did not do a good job of clarifying the issue we are having.
I used the rails code from the "Share your own site's authentication with Tender" article (modified for our domain) and added the deletion of those cookies to our logout code. I have confirmed that the tender_* cookies are both created and deleted during login/logout of our app.
Tender is set up to work with support.ourdomain.com. When I logout of ourdomain.com and go back to support.ourdomain.com and refresh, I am still logged in at support.ourdomain.com.
After taking a closer look at what cookies were showing up for support.ourdomain.com I noticed what looks to be a session cookie, _voxpop_session. If I delete that cookie, and refresh support.ourdomain.com, I am signed out. So it seems like even though I logout of ourdomain.com, support.ourdomain.com does not logout until it's session expires?
So, does that sound like something I need to fix from my end, or is it intended to work that way, or something else?
Thanks for the help. Sorry if I'm just being retarded about something.
3 Posted by System on 10 Jan, 2009 12:48 AM
A Lighthouse ticket was created for this discussion
Support Staff 4 Posted by Courtenay on 10 Jan, 2009 12:48 AM
Good catch. We'll fix this.
5 Posted by Mike (Unspace) on 10 Jan, 2009 08:48 PM
+1
6 Posted by System on 10 Feb, 2009 07:49 AM
Ticket # 189 was resolved by court3nay.
Support Staff 7 Posted by Courtenay on 10 Feb, 2009 07:50 AM
Let me know if this is still a problem.
Courtenay closed this discussion on 10 Feb, 2009 07:50 AM.