search

mfreiholz / persistent_login

Provides a "Keep me logged in" aka "Remember Me" functionality for Roundcube.
79 stars 50 forks source link

Permanent Auto Login unless user erases cookie #45

Open cyberzenk99 opened 6 years ago

cyberzenk99 commented 6 years ago

Is there any way that a user could have an option for permanent logout?

It seems that the cookie stays enabled even if the user log-outs. I could log out 1,000 times and the cookie will automatically log me in the next time that I visit the e-mail.

Is there any way to have a button created to automatically erase the cookie and logout?

michaelchong2005 commented 5 years ago

clear the cookie from your browser

mfreiholz commented 4 years ago

Does this still happen to you with the current version? It doesn't for me.

iraqiboy90 commented 4 years ago

Well. It's a bit different for me: Login out does logout normally and it doesnt autologin on next visit, but deleting the token from the DB does not logout the account If the host column on the DB is always "localhost", does this cause an issue or defeat the purpose of enabling DB tokens? Does the auth_token method keep use a cookie? cus why is there still one being created? When I delete it along with the DB value, it keeps me logged in. Can someone explain this to me? :D