From 8c9c967c88a0b762fd174dc1f1ffd44bb52b9d6c Mon Sep 17 00:00:00 2001 From: Jakub Zych Date: Wed, 28 Oct 2026 19:24:43 +0100 Subject: [PATCH] docs: close todo and debug session - user logout leaves the session cookie valid --- .../debug/{ => resolved}/user-logout-session-stays-valid.md | 2 +- .../2026-10-22-user-logout-cookie-stays-valid.md | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) rename .planning/debug/{ => resolved}/user-logout-session-stays-valid.md (99%) rename .planning/todos/{pending => completed}/2026-10-22-user-logout-cookie-stays-valid.md (96%) diff --git a/.planning/debug/user-logout-session-stays-valid.md b/.planning/debug/resolved/user-logout-session-stays-valid.md similarity index 99% rename from .planning/debug/user-logout-session-stays-valid.md rename to .planning/debug/resolved/user-logout-session-stays-valid.md index 791a8f8e..aa324825 100644 --- a/.planning/debug/user-logout-session-stays-valid.md +++ b/.planning/debug/resolved/user-logout-session-stays-valid.md @@ -1,5 +1,5 @@ --- -status: awaiting_human_verify +status: resolved trigger: "User plugin logout: auth cookies not invalidated at once; requests keep authenticating ~60 min until token expiry (todo 2026-10-22-user-logout-cookie-stays-valid)" created: 2026-10-22T00:00:00Z updated: 2026-10-22T00:00:00Z diff --git a/.planning/todos/pending/2026-10-22-user-logout-cookie-stays-valid.md b/.planning/todos/completed/2026-10-22-user-logout-cookie-stays-valid.md similarity index 96% rename from .planning/todos/pending/2026-10-22-user-logout-cookie-stays-valid.md rename to .planning/todos/completed/2026-10-22-user-logout-cookie-stays-valid.md index ce44c329..8b1eeabd 100644 --- a/.planning/todos/pending/2026-10-22-user-logout-cookie-stays-valid.md +++ b/.planning/todos/completed/2026-10-22-user-logout-cookie-stays-valid.md @@ -53,3 +53,5 @@ Released 2026-10-22: sm-user-plugin v0.1.8 (930b158, with SummerCMS v0.4.3); poi pushed in sm-demo-app (e587980, vue-demo-app 8f8e70d), sm-bm-app, sm-grzybyfunkcjonalne-app and sm-summercmsio-app; fonoteka.go not bumped (34 unpushed commits from another session). Remaining: deploy, then the hand check above; close the todo and the debug session after it. + +Closed 2026-10-28: manual post-deploy check (cookie-only logout, old cookie answers 401) done by the user.