search

senecajs / seneca-auth

A Seneca user authentication plugin for Hapi and Express
http://senecajs.org
MIT License
33 stars 29 forks source link

Logout doesn't seem to be working #5

Closed darsee closed 11 years ago

darsee commented 11 years ago

Tested with user-accounts example.

After logging in, 'seneca-login' cookie is created and /auth/instance returns:

{
  "user": {
    "nick": "u1",
    "email": "u1@example.com",
    "name": "nu1",
    "when": "2013-08-28T10:36:48.615Z",
    "id": "d66znz",
    "accounts": [
      "kge3gz"
    ],
    "entity$": {
      "base": "sys",
      "name": "user"
    }
  },
  "login": {
    "0": "r",
    "1": "o",
    "2": "l",
    "3": "e",
    "4": ",",
    "5": "c",
    "6": "m",
    "7": "d",
    "entity$": "-/sys/login",
    "role": "user",
    "cmd": "login",
    "nick": "u1",
    "email": "u1",
    "password": "u1",
    "user": "d66znz",
    "when": "2013-08-28T10:41:54.003Z",
    "active": true,
    "why": "password",
    "token": "b778b2ae-d717-4ca7-a5ac-53e00a3d493d",
    "id": "b778b2ae-d717-4ca7-a5ac-53e00a3d493d"
  }
}

After logging out, the cookie still exists, /account is still accessible and /auth/instance returns:

{
  "user": {
    "nick": "u1",
    "email": "u1@example.com",
    "name": "nu1",
    "when": "2013-08-28T10:36:48.615Z",
    "id": "d66znz",
    "accounts": [
      "kge3gz"
    ],
    "entity$": {
      "base": "sys",
      "name": "user"
    }
  },
  "login": {
    "0": "r",
    "1": "o",
    "2": "l",
    "3": "e",
    "4": ",",
    "5": "c",
    "6": "m",
    "7": "d",
    "entity$": "-/sys/login",
    "role": "user",
    "cmd": "login",
    "nick": "u1",
    "email": "u1",
    "password": "u1",
    "user": "d66znz",
    "when": "2013-08-28T10:41:54.003Z",
    "active": false,
    "why": "password",
    "token": "b778b2ae-d717-4ca7-a5ac-53e00a3d493d",
    "id": "b778b2ae-d717-4ca7-a5ac-53e00a3d493d",
    "ended": 1377686639718
  }
}