You may be edging close to putting random junk in a query string. You could do it manually for 1 try by just doing a get on the proper url with a ?logout=please at the end.
You still have not 100% stated that the server ever logs out. Just put in something near `session.invalidate()` to log the logout to paster.log. Probably not the issue. As for using a second machine and it thinking you are logged in. Nice debug info. Can you login to google-groups or other sites and see the same behavior. You should be able to see it somewhere? If not, it could still be your bug. Is you "logout" page or button cached? Random stuff in your logout "GET" doesn't pollute your url's in general. How is the page indicating you are logged in. From the session data? From the REMOTE_USER , and if that are you using Basic Auth. You never said. Sorry I can't help more from here. I use Auth with forward so I can touch every piece of it from a controller and debug via Pylons very cool debug do-hickie. -- Phil --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "pylons-discuss" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/pylons-discuss?hl=en -~----------~----~----~----~------~----~------~--~---
