Due to how the security provider works it is possible to open multiple copies of a site in different tabs and login to each with the same credentials.
But, when a user logs out in one tab they remain logged in in the other.
So the question is, anyone any ideas how to force logout in all tabs
I haven’t had to deal with this, but how about web sockets? When a user performs a logout push an event out to the appropriate sessions.
When that message is received, remove the security cookie, or perform a logout ( although that should probably be a different logout action to prevent a perpetual loop).