From 4d7b66ee5a3ac6ae33606ba528b5ba8d0b305ef0 Mon Sep 17 00:00:00 2001 From: Marco Date: Sat, 24 Mar 2018 23:31:12 +0100 Subject: [PATCH] When performing normal logout only delete local remember directives --- src/Auth.php | 15 +++++++++------ 1 file changed, 9 insertions(+), 6 deletions(-) diff --git a/src/Auth.php b/src/Auth.php index dba55f1..e2e6b62 100644 --- a/src/Auth.php +++ b/src/Auth.php @@ -387,13 +387,16 @@ final class Auth extends UserManager { public function logOut() { // if the user has been signed in if ($this->isLoggedIn()) { - // get the user's ID - $userId = $this->getUserId(); + // retrieve any locally existing remember directive + $rememberDirectiveSelector = $this->getRememberDirectiveSelector(); - // if a user ID was set - if (isset($userId)) { - // delete any existing remember directives - $this->deleteRememberDirectiveForUserById($userId); + // if such a remember directive exists + if (isset($rememberDirectiveSelector)) { + // delete the local remember directive + $this->deleteRememberDirectiveForUserById( + $this->getUserId(), + $rememberDirectiveSelector + ); } // remove all session variables maintained by this library