CODEWITHSUNDEEP
laravel
Kordkandi
Kordkandi

Reputation: 149

laravels Auth::logout logs out users that are logged in another browsers

my problem is with laravel auth::logout functionality,
Imagine a user is jept logged in, in different browsers and when I call Auth::logout in one of the browser, it logges out from the other browsers out too,
Is there anyway tosolve this problem in laravel itself?

Edit: this is real problem, when a user is kept logged in in his pc and logs out from another computer, which causes to be logged out from his own pc too.

Upvotes: 0

Views: 420

Answers (1)

Laurence
Laurence

Reputation: 60078

This functionality was a specific feature added to Laravel 4.1.26 as a security measure.

The reason is the exact scenario you provide - if you leave yourself logged in on Computer A, and log yourself out of Computer B - this ensures you are fully logged out of all computers.

It is a security measure. Before this update, if a remember cookie was hijacked by another malicious user, the cookie would remain valid for a long period of time, even after the true owner of the account reset their password, logged out, etc

Upvotes: 2

Related Questions