When you login with DigiD, close the browser and after the max_session_time reopen the browserand visit the site, DigiD is still active.

Solution: If the max_session_time is over the users should be autologout when reopening the site.

CommentFileSizeAuthor
#2 digid-browser-closed-logout-2792305.patch5.93 KBralphvdhoudt

Comments

ralphvdhoudt created an issue. See original summary.

ralphvdhoudt’s picture

ralphvdhoudt commented
Status: Active » Needs review
StatusFileSize
new digid-browser-closed-logout-2792305.patch5.93 KB
ralphvdhoudt’s picture

ralphvdhoudt commented

Included some code cleanup fixes from php sniffer

askibinski’s picture

askibinski commented
Status: Needs review » Reviewed & tested by the community

Patch looks good and tested this behaviour: you are now logged out correctly.

  • ralphvdhoudt committed 5c30a99 on 7.x-1.x 
    Issue #2792305 by ralphvdhoudt: DigiD doesn't force autologout when...
ralphvdhoudt’s picture

ralphvdhoudt commented
Status: Reviewed & tested by the community » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.