petabox

auth cookies need to be server expired

Bug #293879 reported by samuel-archive on 2008-11-05

Affects		Status	Importance	Assigned to	Milestone
	petabox	New	Undecided	Unassigned

server side expiration of auth cookies are necessary for:
logouts to be absolute
password changes to be trigge logouts
recover from cookie theft

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Bug watches keep track of this bug in other bug trackers.