Yes, authentication and session use two different cookies. You can expire auth cookie using both using tg.response.delete_cookie or request.environ['repoze.who.plugins']['main_identifier'].forget method.
On Sat, Jun 2, 2012 at 8:14 AM, Juan Antonio Ibáñez <[email protected]> wrote: > I can see as session gets destroyed but I can still call controllers methods > without being redirected to logout handler. All these methods have @require > predicates. I read something about that repoze uses a different cookie than > beaker to maintain the login auth > > El sábado, 2 de junio de 2012 01:46:29 UTC+2, León Domingo escribió: >> >> Hola Juan, >> The age of the cookie which is used to store your credentials, will make >> that cookie to be invalid (outdated) once it expires. As far as i know you >> dont have to do anything. >> >> Saludos >> >> León Domingo >> >> El 01/06/2012 22:17, "Juan Antonio Ibáñez" <[email protected]> >> escribió: >>> >>> Hello boys, >>> >>> I saw I can set up session timout configuring beaker.session.timeout >>> insisde dev.ini. It works ok, but, is there any way to force going to logout >>> handler url when any controller method gets calles once the session has >>> timed out? >>> >>> Regards >>> >>> -- >>> You received this message because you are subscribed to the Google Groups >>> "TurboGears" group. >>> To view this discussion on the web visit >>> https://groups.google.com/d/msg/turbogears/-/6M0vDiOlqucJ. >>> To post to this group, send email to [email protected]. >>> To unsubscribe from this group, send email to >>> [email protected]. >>> For more options, visit this group at >>> http://groups.google.com/group/turbogears?hl=en. > > -- > You received this message because you are subscribed to the Google Groups > "TurboGears" group. > To view this discussion on the web visit > https://groups.google.com/d/msg/turbogears/-/q3nvgBdxpNkJ. > > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/turbogears?hl=en. -- You received this message because you are subscribed to the Google Groups "TurboGears" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/turbogears?hl=en.
