Logging out should clear the cookie in the browser, but if you've taken a copy of the cookie before that, it's still valid.
On 19 January 2018 at 00:05, Tim Harsch <[email protected]> wrote: > I'm trying to understand the logout chain in jupyterhub/notebooks. > version 0.8.1 and 5.1.0 respectively. I'm using dockerspawner and > jwtauthenticator. > > I would like to effect a logout from outside the UI, so I tried using the > API token and that doesn't seem to work as I get a 403. So I started > experimenting and performed this simple test: > > login to jupyterhub with chrome developer tools. in network tab > right-click copy /user/{name}/api/contents call as curl command. execute > the command at the terminal (which includes Cookie header). Notice success > with JSON. > go to UI and choose logout in UI. > repeat curl command and notice same result. I'm allowed in to a logged > out session with the Cookie token. Does this seem like a bug? or I wonder > if it has to do with my fairly specific environment? > > Thanks, > Tim > > -- > You received this message because you are subscribed to the Google Groups > "Project Jupyter" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > To view this discussion on the web visit https://groups.google.com/d/ > msgid/jupyter/fbb689b6-ca3d-4c7c-abfe-e7ee5fee7cee%40googlegroups.com > <https://groups.google.com/d/msgid/jupyter/fbb689b6-ca3d-4c7c-abfe-e7ee5fee7cee%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Project Jupyter" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/jupyter/CAOvn4qjj3WHr6%2BG%2BOY_AN1vd9k60aMAT042SWt8cGDEh7vcfHA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
