From ad24b7cbdf5d834163e7ea49a33d8b71b46fd00b Mon Sep 17 00:00:00 2001 From: Javier Eguiluz Date: Wed, 27 Jan 2016 16:25:39 +0100 Subject: [PATCH 1/2] Document the invalidate_session option --- reference/configuration/security.rst | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/reference/configuration/security.rst b/reference/configuration/security.rst index e400ab003a2..28c2d0e73a5 100644 --- a/reference/configuration/security.rst +++ b/reference/configuration/security.rst @@ -319,6 +319,19 @@ Redirecting after Login .. _reference-security-pbkdf2: +Logout Configuration +-------------------- + +invalidate_session +.................. + +**type**: ``boolean`` **default**: ``true`` + +By default, the session of the user is invalidated after the log out process. +This means that the user will be logged out for all the firewalls defined in +your application. Set this option to ``false`` to only log out from the current +firewall. + Using the PBKDF2 Encoder: Security and Speed -------------------------------------------- From 1961194d42b94ad96f8e8a12456120193b1e45c6 Mon Sep 17 00:00:00 2001 From: Javier Eguiluz Date: Fri, 29 Jan 2016 17:05:22 +0100 Subject: [PATCH 2/2] Reworded the explanation --- reference/configuration/security.rst | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/reference/configuration/security.rst b/reference/configuration/security.rst index 28c2d0e73a5..53cdb436b5d 100644 --- a/reference/configuration/security.rst +++ b/reference/configuration/security.rst @@ -327,10 +327,13 @@ invalidate_session **type**: ``boolean`` **default**: ``true`` -By default, the session of the user is invalidated after the log out process. -This means that the user will be logged out for all the firewalls defined in -your application. Set this option to ``false`` to only log out from the current -firewall. +By default, when users log out from any firewall, their sessions are invalidated. +This means that logging out from one firewall automatically logs them out from +all the other firewalls. + +The ``invalidate_session`` option allows to redefine this behavior. Set this +option to ``false`` in every firewall and the user will only be logged out from +the current firewall and not the other ones. Using the PBKDF2 Encoder: Security and Speed -------------------------------------------- pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy