Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can't logout from the admin menu #137

Open
arkabase opened this issue Mar 13, 2024 · 0 comments
Open

Can't logout from the admin menu #137

arkabase opened this issue Mar 13, 2024 · 0 comments

Comments

@arkabase
Copy link

NodeBB v3.7.0
Logged in with admin user.
When I click on logout at the bottom of the admin menu I am redirected to the forum homepage but still logged in.
The user menu logout button works fine.

In the logs with verbose active :

[session-sharing] Payload verified
[session-sharing] Processing login for uid 1, path /le-forum/
[UserReset.cleanByUid] No tokens found for uid (1).
[session-sharing] Payload verified
[session-sharing] Re-validated login for uid 1, path /le-forum/admin
...
[user.auth] Revoking session uoe71iyPtT3YSaFMl_hIpVW3L2czgX-Q for user 1
[session-sharing] Payload verified
[session-sharing] Processing login for uid 1, path /le-forum/
[UserReset.cleanByUid] No tokens found for uid (1).

You can see the first login with the shared cookie payload, revalidated for admin access, then revokation of the session on logout, but the cookie is not deleted so the plugin revalidate the login on the homepage.
Does not the cookie need to be deleted on logout ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant