Re: Session Cookie Remains after Tapestry Security Logout

2014-11-03 Thread Kalle Korhonen
On Sun, Nov 2, 2014 at 4:41 PM, Harry Zhou wrote: > The user is indeed logged out, and the session is indeed invalidated. > Everything seems to work fine. > 3. The Issue > Upon closer inspection, I noticed that the session cookie created by user > during login is still in the browser after logout

Re: Session Cookie Remains after Tapestry Security Logout

2014-11-03 Thread Harry Zhou
Kalle, Thank you so much for the quick reply, based on which we have done the following: 1. We surveyed several Tapestry sites (including the hotelbooking demo app) and confirmed that leaving the cookie after session invalidation is expected. 2. We then double confirmed that the leftover cookie i

Re: Session Cookie Remains after Tapestry Security Logout

2014-11-03 Thread Jon Williams
369... On Mon, Nov 3, 2014 at 12:39 PM, Harry Zhou wrote: > Kalle, > > Thank you so much for the quick reply, based on which we have done the > following: > > 1. We surveyed several Tapestry sites (including the hotelbooking demo app) > and confirmed that leaving the cookie after session invalid