Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

login without 'remember me' seems to survive Chrome restart #1

Open
eddyystop opened this issue Jul 3, 2013 · 1 comment
Open

login without 'remember me' seems to survive Chrome restart #1

eddyystop opened this issue Jul 3, 2013 · 1 comment

Comments

@eddyystop
Copy link

These steps show the issue:

  • start your /examples/login
  • open tab in Chrome. type localhost:3000/account. You get login as expected
  • type bob, secret, do not check 'remember me'. You get home as expected
  • go to /account, go to /home
  • Close tab, close Chrome. (Do not restart server.)
  • Restart Chrome, open new tab, type localhost:3000/account
  • You get bob's account info.

Chrome's dev tools show Express' connect.sid cookie as Expires=Session. However it's value after the Chrome restart is the same as before. I would have expected Chrome to delete it and then Express to create a new value.

What am I missing here? Is there any way to require a login when Chrome is restarted? Thanks.

Edit:
This looks similar: http://stackoverflow.com/questions/10957800/google-chrome-session-expire-null-not-working
I did not see anything in the Windows7 task manager that looked Chrome' or addon'ish.

@ile
Copy link

ile commented Nov 2, 2014

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants