Nick, >I'm just wondering if there's been any update on this, ie, is it yet >possible to have the user automatically logged out when they close >their browser window? > > It may be possible using javascript and ajax, although such solutions wouldn't be 100% reliable.
But I really wouldn't worry about this, it's enough to just provide the user with a logout function and, as a backup, expire sessions after a period of inactivity. I've done security reviews on some very sensitive banking applications, and this approach was good enough for all of them. Paul --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "TurboGears" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/turbogears?hl=en -~----------~----~----~----~------~----~------~--~---
