...
Situation | Remember Me Set | Remember Me Not set |
---|---|---|
User logs out, browser reverts to Log In page | Authorization token remains in browser's local storageis invalidated by the logout | Authorization token is deleted with the session storage |
Session expires, browser reverts to Log In page | Authorization token is deleted | Authorization token is deleted with the session storage |
Browser tab is closed during session and then reopened by opening recent tab (Firefox) | Authorization token remains in browser's local storage and is not invalidated as a logout has not taken place | Authorization token remains in browser's session storage |
Browser tab is closed during session and then reopened by opening login page | Authorization token remains in browser's local storage and is not invalidated as a logout has not taken place | Authorization token has been deleted with the session storage |
...