Skip to content

fix: end the WordPress session when logging out of the frontend - #2684

Merged
josephfusco merged 4 commits into
canaryfrom
fix/1147-end-wordpress-session-on-logout
Oct 20, 2026
Merged

josephfusco merged 4 commits into
canaryfrom
fix/1147-end-wordpress-session-on-logout

Conversation

@josephfusco

Copy link
Copy Markdown
Member

Fixes #1147

The logout URL holds an encrypted, five-minute code that only logs out the user it was made for, and with an older FaustWP plugin useLogout falls back to today's behavior; I checked the full flow against a real WordPress with a cookie jar (log in, /generate issues a code, log out, /generate now sends you to the login page), but not in a browser.

Use of AI Tools

AI assistance: Yes
Tool(s): Claude Code
Model(s): Claude Opus 5.5
Used for: Assisting with the design, the plugin route and logout handler, the useLogout and logout handler changes, the tests, and the end-to-end check.

@josephfusco josephfusco added [Type] Bug An existing feature is broken [Area] WordPress Plugin Issues for the Faust.js WordPress plugin [Area] Core Issues for the @faustwp/core package labels Oct 20, 2026
@josephfusco
josephfusco marked this pull request as ready for review October 20, 2026 16:25
@josephfusco
josephfusco requested review from a team and colinmurphy as code owners October 20, 2026 16:25
@josephfusco
josephfusco merged commit f32eb6b into canary Oct 20, 2026
16 checks passed
@josephfusco
josephfusco deleted the fix/1147-end-wordpress-session-on-logout branch October 20, 2026 16:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

[Area] Core Issues for the @faustwp/core package [Area] WordPress Plugin Issues for the Faust.js WordPress plugin [Type] Bug An existing feature is broken

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Logging out with redirect authentication leaves the WordPress session active

1 participant