Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Forcibly clean and destroy the session on logout #11447

Merged
merged 2 commits into from
May 17, 2020

Conversation

zeripath
Copy link
Contributor

Signed-off-by: Andrew Thornton [email protected]

@zeripath zeripath added this to the 1.12.0 milestone May 16, 2020
@GiteaBot GiteaBot added the lgtm/need 1 This PR needs approval from one additional maintainer to be merged. label May 16, 2020
@GiteaBot GiteaBot added lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. and removed lgtm/need 1 This PR needs approval from one additional maintainer to be merged. labels May 17, 2020
@6543
Copy link
Member

6543 commented May 17, 2020

need backport

Copy link
Contributor Author

@zeripath zeripath left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we also need to unset the setting.SessionConfig.CookieName cookie

@zeripath
Copy link
Contributor Author

zeripath commented May 17, 2020

Ah I think I understand!

We don't necessarily have to destroy the session completely if we prevent the session cookie from being set.

I still think destroy is correct though

@lunny
Copy link
Member

lunny commented May 17, 2020

make L-G-T-M work

@lunny lunny merged commit a0d35fb into go-gitea:master May 17, 2020
@lunny
Copy link
Member

lunny commented May 17, 2020

Please send backport to v1.11

@zeripath zeripath deleted the properly-clean-session-on-logout branch May 17, 2020 08:17
zeripath added a commit to zeripath/gitea that referenced this pull request May 17, 2020
Backport go-gitea#11447

Signed-off-by: Andrew Thornton <[email protected]>

Co-authored-by: techknowlogick <[email protected]>
@lafriks lafriks added the backport/done All backports for this PR have been created label May 17, 2020
lafriks pushed a commit that referenced this pull request May 17, 2020
Backport #11447

Signed-off-by: Andrew Thornton <[email protected]>

Co-authored-by: techknowlogick <[email protected]>

Co-authored-by: techknowlogick <[email protected]>
guillep2k pushed a commit to guillep2k/gitea that referenced this pull request May 17, 2020
ydelafollye pushed a commit to ydelafollye/gitea that referenced this pull request Jul 31, 2020
@go-gitea go-gitea locked and limited conversation to collaborators Nov 24, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
backport/done All backports for this PR have been created lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. type/bug
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants