2. Summary
  3. Files
  4. Support
  5. Report Spam
  6. Create account
  7. Log in

Ticket #862 (closed: fixed)

Opened 3 years ago

Last modified 3 years ago

Logout of HostedApps does not work.

Reported by: eeve Owned by: hinojosa
Keywords: ENGR Cc:
Private: no

Description

If I log out of a hosted app like my project's instance of MediaWiki, and I also log out of SourceForge.net, I can still return to the wiki and click the Login button and it logs me into the wiki w/o re-prompting for login credentials.

Related issue is that if I login as a different SF account that does not have admin rights on a project, I still get logged into the media wiki instance as the original user complete with edit rights.

Change History

Changed 3 years ago by eeve

Related info:

Even if I log out of SF.net and log out of this instance of Trac. I close my browser completely and restart it. I can navigate back to here, click the Login link and it automatically logs be back in, w/o prompting for credentials.

Also if I restart the browser then log into SF.net as my other user account, I return here to Trac and click Login, it logs me in as Eeve again. even though I should be logged in as the other account. ??

Changed 3 years ago by eeve

Using Firefox 3.0.5

Changed 3 years ago by eeve

Replicated in Internet Explorer 7.0.5 as well.

I think that the first time you log into apps.sourceforge.net the browser must save some kind of cookie so that even if you close the browser, reopen it and try to log into a hosted app with a different SF user account you are still logged into the hosted app as the first account you used.

In IE7 I did this:

  • I had never been logged into SF via IE7 on this computer before (no cookies).
  • Logged into the media wiki on my project with user Eeve.
  • Left the site and closed the browser.
  • Restarted IE7.
  • Went to the Media Wiki for the same project again. This time logged in as a DIFFERENT user, but it showed me logged in as Eeve again.

Changed 3 years ago by eeve

More detils- this is strange. If I leave my mediawiki instance and then delete all sourceforge.net and apps.sourceforge.net cookies, I can still visit the wiki, click the login link and it logs me in.

Changed 3 years ago by dricci

  • owner set to dricci
  • status changed from new to accepted

Changed 3 years ago by dricci

  • keywords ENGR added
  • owner changed from dricci to hinojosa
  • status changed from accepted to assigned

Hi,

I am seeing similar issues to what you report. I am going to escalate this for further review. We will provide any updates via this ticket.

Best regards,

Danny Ricci, SourceForge.net Support

Changed 3 years ago by hinojosa

  • status changed from assigned to closed
  • resolution set to fixed

Hi,

We have done a tigher integration of the Hosted Apps with the site so that they now use the site authentication. This issue has been resoved in that effort.

Best regards,

Daniel Hinojosa - Sr. Manager, SourceForge.net Support

P.S., Be sure to monitor our Site Status.

Note: See TracTickets for help on using tickets.

© 2012 Geeknet, Inc.   Terms of Use - Privacy Policy