Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Reply and message threads are still authenticated after "logout" #178

Closed
redshiftzero opened this issue Nov 15, 2018 · 0 comments
Closed

Reply and message threads are still authenticated after "logout" #178

redshiftzero opened this issue Nov 15, 2018 · 0 comments
Assignees
@redshiftzero
Labels
bug Something isn't working security
Milestone
0.1.0alpha

Comments

@redshiftzero
Copy link
Contributor

Reply and message threads keep running after logout and are authenticated (one can reproduce this by putting a log line here that prints the value of self.api, and then logging out).

We must ensure that they are also logged out when the user logs out.

To guard against this in the future: freedomofpress/securedrop#3933
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@redshiftzero redshiftzero

Labels
bug Something isn't working security
Projects
None yet
Milestone
0.1.0alpha
Development

No branches or pull requests
1 participant
@redshiftzero