Once a user getts the message 'Your session is about to expire. Do you want to reset it?' if they choose yes or no everything behaves as expected.

However if they dont click anything then instead of being logged out and redirected as they should they get an additional pop up message of 'There has been an error resetting your last access time: error.' If they close this dialog box then the page is still visible.

At this point they have actually been logged out (from the backend). If they refresh the page or click on a link then everything behaves as it should, and they will see they are logged out. The issue is that until they do this the page is still visible. This is a security issue for my site.

Comments

jdln’s picture

Is there a javascript event that fires when the user should be logged out? I need to get this working on my site ASAP so as a temporary hacky solution I was thinking when the user should be redirected from the page (when they are logged out) I could write my own js to redirect them.

jdln’s picture

Priority: Critical » Minor

With 7.x-4.x-dev under the option 'Redirect URL at logout' if the path is set as the default 'user/login' then it works fine but the issue occurs as soon as you change this path.

johnennew’s picture

Version: 7.x-4.0 » 7.x-4.x-dev
Priority: Minor » Normal
Status: Active » Closed (duplicate)

I've checked and this has been fixed with http://drupal.org/node/1043928 (at least it seems to be working now).