...
Situation | Remember Me Set | Remember Me Not set |
---|---|---|
User logs out, browser reverts to Log In page | Access Authorization token remains in browser's local storage | Access Authorization token is deleted with the session storage |
Session expires, browser reverts to Log In page | Access Authorization token is deleted | Access Authorization token is deleted with the session storage |
Browser tab is closed during session and then reopened by opening recent tab (Firefox) | Access Authorization token remains in browser's local storage | Access Authorization token remains in browser's session storage |
...
Browser tab is closed during session and then reopened by opening login page | Authorization token remains in browser's local storage | Authorization token has been deleted with the session storage |
Note that:
- the browser's local storage will not be emptied after a period of time when Remember Me is set and a user does not log in again,
HTTP / HTTPS Communication
...