Fixed session logout by setting expiration date in the past and empty content.

Made compilable with version before 16.05
2016-05-18 12:13:25 +02:00 · 2016-05-18 11:58:16 +02:00
2 changed files with 4 additions and 3 deletions
--- a/modules/admin/handler/user/cms_user_form_response.e
+++ b/modules/admin/handler/user/cms_user_form_response.e
@@ -386,7 +386,7 @@ feature -- Form
 			-- Update node `a_node' with form_data `a_form_data' for the given content type `a_content_type'.
 		local
 			l_uroles: LIST [CMS_USER_ROLE]
-			l_new_roles: ARRAYED_LIST [CMS_USER_ROLE]
+			l_new_roles: detachable ARRAYED_LIST [CMS_USER_ROLE]
 			r: detachable CMS_USER_ROLE
 			rid: INTEGER
 		do
--- a/modules/session_auth/cms_session_auth_module.e
+++ b/modules/session_auth/cms_session_auth_module.e
@@ -172,9 +172,10 @@ feature {NONE} -- Implementation: routes
 				attached api.user as l_user
 			then
 					-- Logout Session
-				create l_cookie.make (tok, l_cookie_token.value) -- FIXME: unicode issue?
+				create l_cookie.make (tok, "") -- l_cookie_token.value) -- FIXME: unicode issue?
 				l_cookie.set_path ("/")
-				l_cookie.set_max_age (-1)
+				l_cookie.unset_max_age
+				l_cookie.set_expiration_date (create {DATE_TIME}.make_from_epoch (0))
 				res.add_cookie (l_cookie)
 				api.unset_user
Author	SHA1	Message	Date
Jocelyn Fiat	6a61c30689	Fixed session logout by setting expiration date in the past and empty content.	2016-05-18 12:13:25 +02:00
Jocelyn Fiat	88aaf9ed4c	Made compilable with version before 16.05	2016-05-18 11:58:16 +02:00