logging out of RefStack server does not immediately remove account access authorization

Bug #1516825 reported by Rochelle Grober
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
refstack
Invalid
Undecided
Unassigned

Bug Description

On IE 11, security set to Internet. *Going through a PROXY*

I was logged into Refstack.openstack.org.
I logged out.
I select Login/Sign in
I am immediately logged in with no username/password challenge.
I have not save the Password for this site to auto login.

This happens every time.

On Chrome, * going through a PROXY*
Select sign in/sign up
openstackID site login fill in.
First time, I don't get returned to Refstack., I am in OpenstackID profile page
go back to Refstack, log out
Log back in
Now on RefStack loggedin home page

I'm fairly certain the chrome behavior is because of the proxy. I suspect the IE behavior is, also.

Without Proxy:
Chrome works fine

FF looks like you can get back to a logged in page (log out then select the back history right after sign in), but no data seems to be leaked. You can get to *one* more page that is only available when logged in, but not data appears.

On IE, looks better, but once logged in the first time, subsequent times still do not route you through the openid site. So, auto login after you select signin.

Catherine Diep (cdiep)
Changed in refstack:
status: New → Incomplete
Revision history for this message
Martin Kopec (mkopec) wrote :

This has been closed as invalid in the newer bug tracker: https://storyboard.openstack.org/#!/story/1516825

Changed in refstack:
status: Incomplete → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.