node.js - stormpath express-session logout not deleting session -
i'm using stormpath-express along express-session in express application. login part works fine. however, when log out, previous session property still there in session. can see session property connect.sid remain same
i invoked /logout <button class="btn btn-default btn-default navbar-btn" onclick="$.post('/logout', function(data) {location.href='/'})">
it's ajax post call /logout.
per stormpath documentation, session destroyed. however, when login different user, previous session cookies still there.
var session = require('express-session'); app.use(session({ genid: function(req) { return uuid.v1(); }, secret: 'xxxxx', resave: false, saveuninitialized: false }));
after logout, previous session property still there
var sess = req.session; if(sess.phonenumbers) { console.log('reuse phonenumbers session'); // why still here??? } else {
express-stormpath delete cookies manages, not delete own cookie don't want interfere custom use-cases other session cookies may used for.
if delete cookies same time ours, can implement route handler runs before ours. place code above call stormpath.init()
:
app.post('/logout', function (req, res, next) { // delete cookies need delete next(); // our logout handler called next });
we planning add post-logout handler allow same thing.
i hope answer helps! p.s. work @ stormpath , maintain these libraries :)
Comments
Post a Comment