Comment 4 for bug 1018347

Revision history for this message
Ricardo Kirkner (ricardokirkner) wrote :

While not having to re-login is indeed a very nice side-effect, there could be a problem if we don't allow logging out of the session somehow. The problem I see is the following scenario:

User logs in with account A to buy some software, but later wants to buy other software with account B. He cannot do this unless he somehow clears the cookies.

This scenario could be very plausible (eg, person helps mom/dad/someone else to buy software via USC), so we should not discard it.

A possible solution would be to delete cookies at the end of the SC session (ie, when closing SC) however that wouldn't get us the benefit on not having to re-login (but at the same time would be a "non-change" functionally speaking)