Bug #61016
closedrsaauth sets separate session-cookie / uses default PHP-sessionhandling
100%
Description
Once you tried to login to FE/BE with rsaauth the default sessionhandling from PHP will have set a cookie (default: PHPSESSID) that won't be removed later.
Can we make use of the TYPO3-sessionhandling (for BE/FE-users) even before/during authentication? Or could we at least remove the session/cookie once no longer needed (which might require using a separate session-ID-name)?
Updated by Gerrit Code Review over 10 years ago
- Status changed from New to Under Review
Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/32212
Updated by Gerrit Code Review about 9 years ago
Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/32212
Updated by Gerrit Code Review over 8 years ago
Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/32212
Updated by Gerrit Code Review over 8 years ago
Patch set 1 for branch TYPO3_7-6 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/47901
Updated by Stefan Neufeind over 8 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset 49bf0d8892630315fb29b0d36aab3c5abf96a6a8.