Sessions Are Not Terminated on Log Out
Summary:
Sessions Are Not Terminated on Log Out
Content (required):
After logout, the user's previous session is still active.
I have added a logout action in the action chain to logout the user from the application. Logout is working fine but the session is not terminated on the server side fully.
During testing we identified the VBCS application does not properly terminate a session when using the logout functionality. This allowed for captured requests to be replayed until the session timed out on the server side.
Is there a way to terminate the session on the server side as well?
Tagged:
0