Exposed cookie not removed when session expires before browser is closed
Brought to you by:
artyom-beilis
Exposed session is not deleted when session expires.
Using browser based expire method.
Here is the session config I'm using. (replaced some texts like hmac_key)
"session" : { "location" : "client", "expire" : "browser", "timeout" : 86400, "client" : { "hmac" : "sha1", "hmac_key" : "test_hmal" }, "cookies" : { "prefix" : "test_prefix" } },
I tested it for many days from my local computer, so 86400 minutes was not that long for me.
Thanks.
Anonymous
Fixed in production branch in cs 2380