From 18499646998c95fb8fff8309ea6d4c187e2a8ca9 Mon Sep 17 00:00:00 2001 From: Peter Parente Date: Sun, 30 Oct 2016 22:36:31 -0400 Subject: [PATCH] Fix jupyter-services cookie reset on logout It currently remains set after logout from the hub allowing the user to continue to access any services. --- jupyterhub/handlers/base.py | 1 + 1 file changed, 1 insertion(+) diff --git a/jupyterhub/handlers/base.py b/jupyterhub/handlers/base.py index cb7f5760..af680f01 100644 --- a/jupyterhub/handlers/base.py +++ b/jupyterhub/handlers/base.py @@ -222,6 +222,7 @@ class BaseHandler(RequestHandler): if user and user.server: self.clear_cookie(user.server.cookie_name, path=user.server.base_url, **kwargs) self.clear_cookie(self.hub.server.cookie_name, path=self.hub.server.base_url, **kwargs) + self.clear_cookie('jupyterhub-services', path=url_path_join(self.base_url, 'services')) def _set_user_cookie(self, user, server): # tornado <4.2 have a bug that consider secure==True as soon as