Bug #48955

Feature #36172: Forge cleanup and update umbrella issue

Sign out should terminate session in forge

Added by Steffen Müller about 8 years ago. Updated about 4 years ago.

Should have
Target version:
Start date:
Due date:
% Done:


Estimated time:


I expect the following scenario to work:

Given I am on http://forge.typo3.org
And I am logged in with SSO from typo3.org
When I click "Sign out"
Then my session on forge should be terminated
And my session on typo3.org should be kept

Instead, the forge session is kept and the typo3.org session is terminated.

Related issues

Related to forge.typo3.org - Bug #46258: Logout from forgeClosedPeter Niederlag2013-03-14


Updated by Steffen Gebert about 8 years ago

  • Status changed from New to Under Review

This should be included in the next update


Updated by Steffen Gebert about 8 years ago

  • Parent task set to #36172

Updated by Steffen Müller over 7 years ago

Any news on this issue?

I would say, if I click "sign out" I would expect the session to be terminated. Imagine you do that on a shared browser (internet cafe) and someone else can abuse your user session.


Updated by Steffen Gebert over 4 years ago

  • Status changed from Under Review to Resolved

This cannot be changed for the current SSO. LDAP with login directly on the sub sites will help.


Updated by Steffen Gebert about 4 years ago

  • Status changed from Resolved to Closed

Also available in: Atom PDF