logging out of RefStack server does not immediately remove account access authorization
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
refstack |
Invalid
|
Undecided
|
Unassigned |
Bug Description
On IE 11, security set to Internet. *Going through a PROXY*
I was logged into Refstack.
I logged out.
I select Login/Sign in
I am immediately logged in with no username/password challenge.
I have not save the Password for this site to auto login.
This happens every time.
On Chrome, * going through a PROXY*
Select sign in/sign up
openstackID site login fill in.
First time, I don't get returned to Refstack., I am in OpenstackID profile page
go back to Refstack, log out
Log back in
Now on RefStack loggedin home page
I'm fairly certain the chrome behavior is because of the proxy. I suspect the IE behavior is, also.
Without Proxy:
Chrome works fine
FF looks like you can get back to a logged in page (log out then select the back history right after sign in), but no data seems to be leaked. You can get to *one* more page that is only available when logged in, but not data appears.
On IE, looks better, but once logged in the first time, subsequent times still do not route you through the openid site. So, auto login after you select signin.
Changed in refstack: | |
status: | New → Incomplete |
This has been closed as invalid in the newer bug tracker: https:/ /storyboard. openstack. org/#!/ story/1516825