Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Session token is not changing even after logout. #78

Open
kamal13597 opened this issue Feb 5, 2024 · 0 comments
Open

Session token is not changing even after logout. #78

kamal13597 opened this issue Feb 5, 2024 · 0 comments

Comments

@kamal13597
Copy link

Here is how i implemented in a sinatra application:

redis_options = {
host: hostname,
port: port,
password: password,
db: 1,
ssl: true
}

use Rack::Session::Redis, redis_server: redis_options, expire_after: 86400

But the token, it's generation is same even after the logout for a user. This seems to me a security threat. Can please help me if missing on any configuration part.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant