node.js - stormpath express-session logout not deleting session -


i'm using stormpath-express along express-session in express application. login part works fine. however, when log out, previous session property still there in session. can see session property connect.sid remain same

i invoked /logout <button class="btn btn-default btn-default navbar-btn" onclick="$.post('/logout', function(data) {location.href='/'})"> it's ajax post call /logout.

per stormpath documentation, session destroyed. however, when login different user, previous session cookies still there.

var session = require('express-session');     app.use(session({       genid: function(req) {         return uuid.v1();       },       secret: 'xxxxx',       resave: false,       saveuninitialized: false     })); 

after logout, previous session property still there

var sess = req.session;         if(sess.phonenumbers) {             console.log('reuse phonenumbers session'); // why still here???         } else { 

express-stormpath delete cookies manages, not delete own cookie don't want interfere custom use-cases other session cookies may used for.

if delete cookies same time ours, can implement route handler runs before ours. place code above call stormpath.init():

   app.post('/logout', function (req, res, next) {      // delete cookies need delete      next();  // our logout handler called next    }); 

we planning add post-logout handler allow same thing.

i hope answer helps! p.s. work @ stormpath , maintain these libraries :)


Comments

Popular posts from this blog

java - Run spring boot application error: Cannot instantiate interface org.springframework.context.ApplicationListener -

reactjs - React router and this.props.children - how to pass state to this.props.children -

Excel VBA "Microsoft Windows Common Controls 6.0 (SP6)" Location Changes -