activerecord-session_store
activerecord-session_store copied to clipboard
rails
Session isn't reset after logging out
In my app, the user can login via oauth (using omniauth). They log out by calling Devise::SessionsController#destroy. When this happens, current_user is nil, and the session object is reset. All good, seemingly.
However, when the user tries to login via oauth again, and the omniauth callback gets called, current_user is already present! In the callback, session.to_json returns a valid session with the user that was previously logged in. This makes me think that the session isn't resetting properly during logout. I've spent a fair amount of time trying to debug this line by line but haven't gotten anywhere. Has anyone else experienced this problem?
I read over this issue but that was for cookie-store only.
This makes me think that the session isn't resetting properly during logout.
is the record still in the table or not after the log-out ?
I have the same issue, I delete all sessions in the database, but our devise user still stays logged in and the session gets recreated? wtf
