Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

No logout when close CAS session #147

Open
guaracheitor opened this issue Mar 8, 2024 · 1 comment
Open

No logout when close CAS session #147

guaracheitor opened this issue Mar 8, 2024 · 1 comment

Comments

@guaracheitor
Copy link

Hi everyone and thank-you for this great plugin!

I've managed a multisite WP. Login process is perfect, but if I close the CAS session, WP session remains open.

Any hint?

Regards,
Inti

@figureone
Copy link
Member

Is your CAS server configured for SLO (Single Logout)?
https://apereo.github.io/cas/7.0.x/installation/Logout-Single-Signout.html#single-logout-slo

If so, we can work on responding to that event notification. Our institution has it disabled so we never built the functionality to destroy the WordPress session on CAS logout.

Alternatively, you can shorten the length of the WordPress sessions so they invalidate quicker, requiring a round trip back to CAS to authenticate. This would at least shorten the time between CAS logout and WordPress logout.
https://developer.wordpress.org/reference/hooks/auth_cookie_expiration/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants