[OFBIZ-10635] Correct behaviour of Autologin cookies

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Release Branch 16.11, Release Branch 17.12, Trunk
• Fix Version/s: 17.12.01, 18.12.01
• Component/s: ALL APPLICATIONS
• Assignee: Jacques Le Roux
• Reporter: Jacques Le Roux
• Created: 30/Oct/18 18:19
• Updated: 15/Jan/19 13:52
• Resolved: 11/Jan/19 16:27

Description

With OFBIZ-4959 I have cleaned a bit how the Autologin cookies behave. But I followed the way it was initially done and when you think about it it does not make sense.

I introduced the "keep-autologin-cookie" attribute in the "webapp" element of the ofbiz-component files. But after I created the securedLoginId cookies for OFBIZ-10307 we no longer need to create Autologin cookies for applications which don't use it.

So I'll rename "keep-autologin-cookie" to "use-autologin-cookie", and only create Autologin cookies when needed. No need to create and keep Autologin cookies in applications that don't need it.

Issue Links

• relates to: OFBIZ-4959 Logout do not remove autoLogin