Delete session cookie on logout.

Resolves Issue #4, I think.
jgm · Dec 27, 2008 · dc4280c · dc4280c
1 parent d3b2ae7
commit dc4280c
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/Gitit.hs b/Gitit.hs
@@ -960,7 +960,9 @@ logoutUser _ params = do
   let key = pSessionKey params
   let destination = pDestination params
   case key of
-       Just k  -> update $ DelSession k
+       Just k  -> do
+         update $ DelSession k
+         addCookie 0 (mkCookie "sid" "")  -- make cookie expire immediately, effectively deleting it
        Nothing -> return ()
   seeOther ("/" ++ substitute " " "%20" destination) $ toResponse $ p << "You have been logged out."