Skip to content

Document the invalidate_session option #6191

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
Closed
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Next Next commit
Document the invalidate_session option
  • Loading branch information
javiereguiluz committed Jan 27, 2016
commit ad24b7cbdf5d834163e7ea49a33d8b71b46fd00b
13 changes: 13 additions & 0 deletions reference/configuration/security.rst
Original file line number Diff line number Diff line change
Expand Up @@ -319,6 +319,19 @@ Redirecting after Login

.. _reference-security-pbkdf2:

Logout Configuration
--------------------

invalidate_session
..................

**type**: ``boolean`` **default**: ``true``

By default, the session of the user is invalidated after the log out process.
This means that the user will be logged out for all the firewalls defined in
your application. Set this option to ``false`` to only log out from the current
firewall.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

maybe some note has to be added that this only applies to the current firewall the user logouts from. So if you always want a user not be logged out in any other firewall, you have to set this to false for every firewall defined.


Using the PBKDF2 Encoder: Security and Speed
--------------------------------------------

Expand Down