# Problems with new cookie session store and firefox

**URL:** <https://www.ruby-forum.com/t/problems-with-new-cookie-session-store-and-firefox/124590>\
**Category:** Rails\
**Created:** [December 30, 2007, 6:14pm UTC](https://www.ruby-forum.com/t/problems-with-new-cookie-session-store-and-firefox/124590 "2007-12-30T18:14:54Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![jawosis](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/f04885/32.png) [@jawosis](https://www.ruby-forum.com/u/jawosis)\
**Post date:** [December 30, 2007, 6:14pm UTC](https://www.ruby-forum.com/t/problems-with-new-cookie-session-store-and-firefox/124590/1 "2007-12-30T18:14:54Z")

</div>

I run Rails 2.0.2 and use the new cookie based session store.

My users get authenticated against a mysql database. When the  
credentials  
are ok I set session[:userid].

I use session[:userid] for example to track the user and in all  
controller actions … find(:all, :conditions =\> [bla.user\_id =  
session[:userid] …

Let’s say a logged in user does not click on the Logout button but  
closes  
the browser window with CTRL-Q or something like that…

Then I open firefox again and I’am still logged in…looking in  
Firefox’s  
cookie store I still see the cookie.

In Safari I do not have this problem…

Can someone confirm this?

PS: MacOSX Leopard, Firefox 2.0.0.11

–  
Jochen K.  
[figgfrosch.de](http://figgfrosch.de) / [gissmoh.de](http://gissmoh.de) / [ror-ror.de](http://ror-ror.de) / [railswerk.de](http://railswerk.de)

---

<div class="post-metadata">

**Author:** ![jawosis](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/f04885/32.png) [@jawosis](https://www.ruby-forum.com/u/jawosis)\
**Post date:** [December 30, 2007, 6:41pm UTC](https://www.ruby-forum.com/t/problems-with-new-cookie-session-store-and-firefox/124590/2 "2007-12-30T18:41:54Z")

</div>

Am 30.12.2007 um 18:13 schrieb Jochen K.:

> Can someone confirm this?
> 
> PS: MacOSX Leopard, Firefox 2.0.0.11

I just told firefox to start up with a blank page - I always told him to  
reopen all pages. No the problems seems to be away. 🙂

---

<div class="post-metadata">

**Author:** ![jawosis](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/f04885/32.png) [@jawosis](https://www.ruby-forum.com/u/jawosis)\
**Post date:** [December 31, 2007, 6:46pm UTC](https://www.ruby-forum.com/t/problems-with-new-cookie-session-store-and-firefox/124590/3 "2007-12-31T18:46:24Z")

</div>

On 12/30/07, Jochen K. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> Can someone confirm this?
> 
> PS: MacOSX Leopard, Firefox 2.0.0.11

Firefox has customizable preferences for what goes away when you close  
the browser. Have a look at Preferences → Privacy → Settings →   
Authenticated Sessions to see if yours is behaving like you’re  
expecting it to.

–  
Greg D.  
[http://destiney.com/](http://destiney.com/)

---

<div class="post-metadata">

**Author:** ![jawosis](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/f04885/32.png) [@jawosis](https://www.ruby-forum.com/u/jawosis)\
**Post date:** [December 31, 2007, 6:55pm UTC](https://www.ruby-forum.com/t/problems-with-new-cookie-session-store-and-firefox/124590/4 "2007-12-31T18:55:11Z")

</div>

Am 31.12.2007 um 18:45 schrieb Greg D.:

> > controller actions … find(:all, :conditions =\> [bla.user\_id =  
> > In Safari I do not have this problem…

I know these settings and I played with them.

When the clicks on “log off” I do a “reset\_session”…shouldn’t the  
cookie  
be deleted in firefox?

As described above the problem does not occur in safari-

–  
Jochen K.  
[figgfrosch.de](http://figgfrosch.de) / [gissmoh.de](http://gissmoh.de) / [ror-ror.de](http://ror-ror.de) / [railswerk.de](http://railswerk.de)

---

<div class="post-metadata">

**Author:** ![jawosis](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/f04885/32.png) [@jawosis](https://www.ruby-forum.com/u/jawosis)\
**Post date:** [December 31, 2007, 10:20pm UTC](https://www.ruby-forum.com/t/problems-with-new-cookie-session-store-and-firefox/124590/5 "2007-12-31T22:20:20Z")

</div>

Am 31.12.2007 um 22:13 schrieb Greg D.:

> On 12/31/07, Jochen K. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:
> 
> > I know these settings and I played with them.
> > 
> > When the clicks on “log off” I do a “reset\_session”…shouldn’t the  
> > cookie  
> > be deleted in firefox?
> 
> Yes, but it won’t really be gone until the next request. Are you  
> redirecting after the reset\_session ?

Yes, I make a redirect\_to to the home page and render a partial  
with information concerning the successfull log out.

> > As described above the problem does not occur in safari-
> 
> I just tested this one app I have open and I don’t notice any  
> differences with reset\_session between Safari and Firefox. I have to  
> think something is up with your Firefox.

I will try to figure it out next few days…  
Thanx.

–  
Jochen K.  
[figgfrosch.de](http://figgfrosch.de) / [gissmoh.de](http://gissmoh.de) / [ror-ror.de](http://ror-ror.de) / [railswerk.de](http://railswerk.de)

---

<div class="post-metadata">

**Author:** ![jawosis](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/f04885/32.png) [@jawosis](https://www.ruby-forum.com/u/jawosis)\
**Post date:** [December 31, 2007, 10:14pm UTC](https://www.ruby-forum.com/t/problems-with-new-cookie-session-store-and-firefox/124590/6 "2007-12-31T22:14:29Z")

</div>

On 12/31/07, Jochen K. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> I know these settings and I played with them.
> 
> When the clicks on “log off” I do a “reset\_session”…shouldn’t the  
> cookie  
> be deleted in firefox?

Yes, but it won’t really be gone until the next request. Are you  
redirecting after the reset\_session ?

> As described above the problem does not occur in safari-

I just tested this one app I have open and I don’t notice any  
differences with reset\_session between Safari and Firefox. I have to  
think something is up with your Firefox.

–  
Greg D.  
[http://destiney.com/](http://destiney.com/)
