8000 Reauthentication needs session clear · Issue #63 · mitodl/pylti · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
Reauthentication needs session clear #63
New issue
New issue
Open
Open
Reauthentication needs session clear#63
@jolyonb

Description

@jolyonb
jolyonb
opened on Sep 13, 2016

When a user successfully logs into an LTI session, pyLTI currently assumes that they want to remain logged into this session until the session cookie expires. If they attempt to log into another session with different credentials, those new credentials are not checked. This means that old credentials can be passed into an application.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions
      10CA
      0