comparison README.md @ 4415:8dde014af77b

session: Remove potential infinite loop of logging out. When a user is logged in while the session is not available on the server side, and the user wants to log out, the logout request is started. When the server refuses to log the user out without a valid token and answers (correctly) with HTTP 401, the app calls the logout per default, which might end in an infinite loop. The logout procedure tests whether the users has a token stored. If so, the logout is called and the token is removed. In case the logout was answered with a HTTP 401 the cycle begins anew, but this time without token the user is treated as effective being logged out.
author Thomas Junk <thomas.junk@intevation.de>
date Wed, 18 Sep 2019 11:32:29 +0200
parents ab08a74ad2f4
children 0bfecb6beda1
comparison
equal deleted inserted replaced
4414:b5290f4a35f4 4415:8dde014af77b