-
-
Notifications
You must be signed in to change notification settings - Fork 5.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Forcibly clean and destroy the session on logout #11447
Forcibly clean and destroy the session on logout #11447
Conversation
Signed-off-by: Andrew Thornton <[email protected]>
need backport |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think we also need to unset the setting.SessionConfig.CookieName
cookie
Ah I think I understand! We don't necessarily have to destroy the session completely if we prevent the session cookie from being set. I still think destroy is correct though |
make L-G-T-M work |
Please send backport to v1.11 |
Backport go-gitea#11447 Signed-off-by: Andrew Thornton <[email protected]> Co-authored-by: techknowlogick <[email protected]>
Backport #11447 Signed-off-by: Andrew Thornton <[email protected]> Co-authored-by: techknowlogick <[email protected]> Co-authored-by: techknowlogick <[email protected]>
Signed-off-by: Andrew Thornton <[email protected]> Co-authored-by: techknowlogick <[email protected]>
Signed-off-by: Andrew Thornton <[email protected]> Co-authored-by: techknowlogick <[email protected]>
Signed-off-by: Andrew Thornton [email protected]