Make 'logout' forget remember token

snapframework · Sep 29, 2011 · bbcb9f9 · bbcb9f9
1 parent 8766570
commit bbcb9f9
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/Snap/Snaplet/Auth.hs b/src/Snap/Snaplet/Auth.hs
@@ -135,6 +135,8 @@ logout :: Handler b (AuthManager b) ()
 logout = do 
   s <- getsSnapletState session
   withTop s $ withSession s removeSessionUserId 
+  AuthManager _ _ _ _ rc _ _ _ <- getSnapletState
+  forgetRememberToken rc
   modifySnapletState (\mgr -> mgr { activeUser = Nothing } )
 
 
@@ -297,9 +299,13 @@ forceLogin u = do
 
 getRememberToken sk rc rp = getSecureCookie rc sk rp
 
+
 setRememberToken sk rc rp token = setSecureCookie rc sk rp token
 
 
+forgetRememberToken rc = expireCookie rc (Just "/")
+
+
 ------------------------------------------------------------------------------
 -- | Set the current user's 'UserId' in the active session
 setSessionUserId :: UserId -> Handler b SessionManager ()