Closed baszoetekouw closed 2 years ago
@baszoetekouw The easiest way to invalidate all client-side cookies is to change the secret_key
of the SBS server each time a new version is deployed. This will cause a 401 on every subsequent client request and this will force a new login (with SSO probably) resulting in a refresh of the JS / CSS.
Sounds like a good solution; should be easy enough to add the version number in the secret
This bug occured with at least one institution after the last update. This should be fixed in the next release.
Gedrag al gezien op test. Werkt.
I'm not sure what is causing this, because the actual js asserts get a unique name for each new release. Maybe the actual pages (
https://test.sram.surf.nl/profile
etc) should be set to no-cache?