Logout should not terminate all sessions of the user on multiple devices
1039
Views
2
Comments
New
Backend

A few months after go live, production users start complaining that they randomly lose their session in a mobile app.

The conclusion from your testers is that users are logging out of a reactive web application in their desktop browsers, and 5 minutes later they lose the mobile session.

"IMPOSSIBLE!" - you say - "Logging out from the browser cannot possibly terminate the mobile session 5 minutes later, that's absurd and unheard of"


So you try to investigate it yourself and, sure enough, the tester was right. Logging out from the desktop browser indeed terminates not only the mobile session, but every other session of the user. Oh, you also find out that this is documented and deliberate: "When the end user logs out of an application, all sessions are terminated".

You investigate further, and begin to realize that it's impossible to preserve the mobile session after the user has logged out from a browser. It's also impossible for the user to use multiple browsers on different devices, or even multiple browsers on the same device, because any logout action would terminate all sessions in all browsers. This is unexpected behavior that contradicts how the web works.


You reconvene with your testers to brainstorm workarounds, but you're not taken seriously: "Surely this very expensive platform and market leader can support an application running on two browsers simultaneously!" All you can do is wish it did...



If this scenario has happened to you on any project, please like this idea and share with others. Together we can change how the Logout works, and enable this very basic feature which is having two independent sessions on distinct devices.

If it is as mentioned in documentation it is a big issue and very bad UX. This should be solved as soon as possible. I agree with you @Leonardo 

Just closed a support ticket about the same issue, but in my case it happen in the same application.

We a have a cockpit where the users pick a mobile device to start working, but it happens with some frequence that the user logins with the Device A, sees that is almost without battery, logins in the Device B and then logout from the Device A.

After 5 minutes the user gets logout of the application.

Some times they don't even logout of the Device A right away, so when other user picks that Device A, will need to logout and login with his user.

Making the previous user logout after minutes / hours of continuous work.

Don't even know how I never noticed this in other similar projects, most likely the users simply didn't report the issue.

Seems like a basic/mandatory feature to have, so I'm pushing on this idea.