Forum Discussion

JP_135500's avatar
JP_135500
Icon for Nimbostratus rankNimbostratus
Jul 16, 2014

Chrome persisting APM session on browser close when apps/extensions are allowed to run after Chrome closes

We are experiencing an issue with Chrome (35+ at least) where the user's session persists even after Chrome is closed and the computer is restarted. I'm not seeing this issue in Firefox, Opera, Safari or Internet Explorer 11. If the user initiates an appropriate logout sequence, then the session is properly terminated as expected.

 

What I've found is that this issue only exists for users who have enabled the ability for apps/extensions to continue to run in the background after Chrome closes. Once this setting is disabled, closing the browser clears the session cookie. I suspect this may be an issue with how we are doing APM sessions, but I was hoping I might get some advice from anyone might have experienced this.

 

We are running 11.4.1HF3. Thanks!

 

APM
deployment
security

1 Reply

Sort By
  • Arnaud_Lemaire's avatar
    Arnaud_Lemaire
    Icon for Employee rankEmployee
    Jul 31, 2014

    It seems that this option keeps cookies alive even if the browser is closed ? could you check it by running a client side trace with dev tools on chrome to check if next open browser session is automatically sending APM cookies ?

     

    when you talk about appropriate logout sequence do you mean that you have a logout uri for your application ?

     

    in such case you could try to force APM session delete with some irules :

     

    https://devcentral.f5.com/wiki/iRules.ACCESS__session.ashx