redis-rack
redis-rack copied to clipboard
Session token is not changing even after logout.
Here is how i implemented in a sinatra application:
redis_options = { host: hostname, port: port, password: password, db: 1, ssl: true }
use Rack::Session::Redis, redis_server: redis_options, expire_after: 86400
But the token, it's generation is same even after the logout for a user. This seems to me a security threat. Can please help me if missing on any configuration part.