Exposed session is not deleted when session expires.
Using browser based expire method.
Here is the session config I'm using. (replaced some texts like hmac_key)
"session" : {
"location" : "client",
"expire" : "browser",
"timeout" : 86400,
"client" : {
"hmac" : "sha1",
"hmac_key" : "test_hmal"
},
"cookies" : {
"prefix" : "test_prefix"
}
},
I tested it for many days from my local computer, so 86400 minutes was not that long for me.
Thanks.
Anonymous
Fixed in production branch in cs 2380