-
Notifications
You must be signed in to change notification settings - Fork 2.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Unable to delete cookie for gmail via Clear On Exit #9085
Comments
FYI got a private response from what I deemed was a spammer. Sigh |
@snowbound Dupe of #8842 (comment) cc: @jumde |
@snowbound - On With: If I log into gmail.com, close and re-open the browser. I don't stay logged into gmail.com Let me know if I'm missing something. |
@jumde When I use Chrome and my current browser MS Edge Chromium and tell it to delete the "google.com" cookie upon exiting the browser I am logged out of all the Gmail accounts I was logged into. The 2Factor Authentication cookie is still intact, |
@jumde I believe @snowbound is using the I can definitely understand not wanting to use the |
Correct @bsclifton I am indeed using "Clear on exit" or would like to but even with the current build of Brave ---Version 1.9.45 Chromium: 81.0.4044.122 (Official Build) beta (64-bit) it is still not working. |
@snowbound - Thanks for your help. Are you able to repro this if you disable |
With cookie exceptions the behavior is same in Chromium: https://bugs.chromium.org/p/chromium/issues/detail?id=1081587 - Needs an upstream fix. |
@jumde Only setting I have enabled in Social Blocking is "Allow Twitter embedded tweets" and I have "google.com" entered under "Clear on exit" . That should force a logout on Gmail accounts like Chrome and Edge Chromium on the next browser start. It does not |
This issue still persists in |
Thought this issue was solved with the help from fellow Reddit user UrbenLedgen in this thread but has reappeared. Today when I started up Brave I was still logged into all of my Gmail accounts. Six month old thread on Brave Community thread on this issue. Version 1.15.54 Chromium: 85.0.4183.102 (Official Build) beta (64-bit) |
Clear on Exit appears to have been replaced by "Always clear cookies when windows are closed" and this is still apparently happening on both the release version of Brave as well as Version 1.19.77 Chromium: 87.0.4280.101 (Official Build) beta (64-bit) |
How is it that the current MS Edge Chromium Beta at least is capable of deleting the google.com cookie on exit yet Version 1.19.77 Chromium: 87.0.4280.101 (Official Build) beta (64-bit) it is an impossible task to accomplish? I have nothing enabled in Allow Google login buttons on third party sites in brave://settings/socialBlocking |
@snowbound - I was able to reproduce this issue. Thanks for all your feedback! Will keep you posted about the progress. |
Thank you for the feedback I spent countless hours here reinstalling Brave and trying various things thinking it was an issue here. |
This is close to a year-old bug that along with a sync issue has currently caused me to switch to another Chromium browser. Is there any ETA at all when it will be fixed? |
Is this issue about to be fixed anytime soon? Why are other Chromium-based browsers not having this issue? |
How is this not fixed yet |
I have had to resort to using Cookie AutoDelete extension to do the cookie deletion as it appears Brave is the only Chromium-based browser that is incapable of doing this. I have tried countless other browsers and they have no such issue. As this is a 14+ month old issue that still has not been fixed I doubt it ever will be. |
@bridiver If I then go to Always clear cookies when windows are closed and enter google.com then the above cookie should be deleted when Brave is closed. It is not. If this cookie is indeed deleted then it will automatically do a force logout of your Gmail accounts. If I close Brave down then start it back up and go into All Cookies and Site Data then the google.com cookie is still there in Brave Beta v 1.36.83 |
Can you try it on nightly? I was logged out of gmail when I closed and reopened the browser. What OS? |
Windows10 Pro 21H2 Only have Beta and release version installed here. |
I was able to reproduce on
STR:
Notes: Please note that @snowbound is asking about the (A) I tested (A) in the above. |
@Miyayes I believe he is referring to "Always clear cookies when windows are closed" as I posted here #9085 (comment) There is no "clear on exit" settings, but it may have been called that when the issue was filed |
That's interesting because with @Miyayes can you post a video of your repro? |
I have to make something clear. I DO NOT want to clear ALL the cookies from Google. Only the cookie that shows up in the list of all cookies as "Google.com" in the list of cookies. This is because if you use [*.]google.com it will delete all cookies including 2FA and other settings such as for YouTube etc. Deleting the "Google.com" cookie pictured here Will force a log out of Gmail accounts automatically upon browser closure or should. Two years ago both Chrome and MS Edge had no problem deleting this cookie. I BELIEVE it is the SID subcookie?? that if deleted forces a log out of Gmail accounts which is good security practice I try to follow. |
So this appears to be caused by the google login setting in @snowbound disabling the toggle should fix your issue and I believe 3p google login should continue to work, but we need time to verify. |
@bridiver nope, that toogle has always been off. |
@snowbound when you restart the browser, do you still have a gmail tab open? Does the same thing happen if you close any open gmail tabs before closing the browser? |
@bridiver no tabs are automatically open on browser startup. I use an extension Session Buddy to restore the tabs open when it last saved the open tabs. That process is manual. I click on Session Buddy select the last saved session and restore the tabs in the current blank window which is a NEW TAB. |
@snowbound do you have that extension installed on Chrome as well? I haven't heard back from @Miyayes about his results with the correct domain, but I'd like to make sure we're eliminating any extensions as a possible part of the problem. |
also I assume based on your other preferences that you have google auto sign in disabled on Chrome? |
@bridiver correct Google uses 2FA and Chrome is set to open a new tab on start up and session buddy used there as well. When the tabs are restored I have to login to the 2 Gmail accounts. |
The Settings UI has gone through several iterations since this issue was reported, we've gotten rid of the global Google Login button. I'm not sure what exactly the ask here is at this point, will close it out. We also have plans to remove the cookie detail page: #39033 |
With Google Chrome and MS Edge Chromium if you enter "google.com" in their respective Clear On Exit for cookies then when the browser is closed and restarted any sessions for Gmail are automatically logged out. This is because it deletes the SID subcookie for Google.com
Steps to Reproduce
Actual result:
You are still logged into Gmail account
Expected result:
You should be logged out of gmail if the deletion of the google.com is occurring. It is not as the google.com still shows up under brave://settings/siteData when Brave is closed and restarted.
Reproduces how often:
on demand
Brave version (brave://version info)
Version 1.8.66 Chromium: 81.0.4044.83 (Official Build) beta (64-bit)
Version/Channel Information:
Other Additional Information:
Miscellaneous Information:
Even using [*.]google.com does not log one out of Gmail. One should be able to delete specific cookies which in this case is the SID@mail.google.com one which forces a logout of the gmail account.
I was told in this thread on the community to enable “Cookies and Site Data” but when I did that back in February it resulted in a scorched earth of deleting 2FA authorization cookies as well as the YouTube configuration cookie.
The text was updated successfully, but these errors were encountered: