clicking "logout" also logs me out of launchpad

Bug #498104 reported by Philipp Kaluza
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Ubuntu One Servers
Confirmed
High
Ubuntu One Foundations+ team

Bug Description

When I am in the Ubuntu One web interface and click on "logout", I am logged out of all of launchpad. That is really annoying. All I expect this to do is to shut down the (OpenID-authenticated) session for Ubuntu One, but not my (longer-lived) session to launchpad.
In short: if you cannot provide true single-signon, don't provide single-sign-out. :-)

visibility: private → public
Jonathan Davies (jpds)
Changed in ubuntuone-servers:
status: New → Confirmed
dobey (dobey)
Changed in ubuntuone-servers:
importance: Undecided → High
Revision history for this message
Elliot Murphy (statik) wrote : Re: [Bug 498104] Re: clicking "logout" also logs me out of launchpad

This may be a wontfix, or at least the fix involved is to provide an
option in canonical-identity-provider about how long to persist the
login.

The reason things work this way currently is because otherwise there
is a security issue on shared computers. If logging out of
one.ubuntu.com left you logged into launchpad, then the next person to
come along and attempt to access one.ubuntu.com would be able to login
without needing to re-enter their credentials (because the launchpad
cookie would be used).

--
Elliot Murphy | https://launchpad.net/~statik/

Changed in ubuntuone-servers:
assignee: nobody → Ubuntu One Foundations+ team (uone-foundations)
tags: added: foundations+
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.