Browse Source

Fixed race condition: AJAX data fetch requests re-set sessions that should get deleted by logout request.

Thorsten Eckel 6 years ago
parent
commit
295844c72e
1 changed files with 2 additions and 1 deletions
  1. 2 1
      app/controllers/sessions_controller.rb

+ 2 - 1
app/controllers/sessions_controller.rb

@@ -114,12 +114,13 @@ class SessionsController < ApplicationController
   # "Delete" a login, aka "log the user out"
   def destroy
 
+    reset_session
+
     # Remove the user id from the session
     @_current_user = nil
 
     # reset session
     request.env['rack.session.options'][:expire_after] = nil
-    session.clear
 
     render json: {}
   end