Issue #3

0 up
0 down
Open
softwarepublico/omniauth-remote-user#3
Created by Charles Oliveira

Log out when RemoteUser is not being passed

When I'm logged in Colab and access 'Code > Profile' is OK. After that, logging out of Colab, I still can access 'Code > Profile' (through direct URL), even if I'm not logged in! That happens because the browser still sends over valid Gitlab cookies, which allows me to access Gitlab pages as if I was a logged user. Colab does pass cookies to Gitlab, but no RemoteUser. Let's try to find a way to prevent Gitlab from doing so.

Assignee: None
Milestone: None
1 participant