[Bug] Logout button not working when the Keep me logged in button is not checked

[jonas-martinez]

The logout button is not working when the Keep me logged in button is not checked.

Scenario 1

I check the box keep me logged in and connect, I click on the logout button it works fine.

Scenario 2

I don't check the keep me logged in box and I log in. When I click on the logout button there is a 401 Unauthorized error on the /auth/logout, the server returns You are not authenticated.

How to fix the issue

It seems that this problem is due to the pipeline :ensure_auth_refresh that is just above the /auth/logout route. In fact, this pipeline checks if a cookie exists but by not checking the Keep me logged in box there is no cookie. This is causing the pipeline to return 401 Unauthorized.

[taorepoara]

There should be a cookie in both cases. The difference is the duration of the cookie. If the Keep me logged in is checked, the duration is 30 days, if not, the duration is the user session.