Humbedooh commented on issue #1337: URL: https://github.com/apache/tooling-trusted-releases/issues/1337#issuecomment-5031338624
The main isue here seems to be that Authentik (mfa.a.o) stores the session cookie in a session lifetime cycle, which Authentik notes can be interpreted very differently from browser to browser ( they link to https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Set-Cookie#expiresdate for an explanation). The end-session endpoint does also not seem to actually clear out the session cookie, so we may have to force an expiry (which will maybe add the "remember me" switch on login, we'll see). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
