What is meta? ×
Meta Stack Exchange is where users like you discuss bugs, features, and support issues that affect the software powering all 127 Stack Exchange communities.

A couple weeks ago I logged out of a site that I wasn't expecting to use again, and also revoked Google's OpenID authorization (just being tidy). Yesterday I followed a link from chat to that site and it auto-logged me in (no prompt, no password challenge, and apparently approval from Google?). This isn't a complaint, but I am puzzled by what happened.

What is logging out supposed to mean, with respect to future visits to that site? I expected to come in as a not-logged-in user.

(All of this was in Firefox, but on two different machines.)

share|improve this question
    
Probably because you are logged in with the same OpenID in other site. –  Shadow Wizard Mar 14 '13 at 15:59
    
@ShaWizDowArd But if you explicitly revoke the OpenID authorization, should that still happen? –  Bart Mar 14 '13 at 15:59
    
Right, I was (continuously) logged in on other sites, but I expected the OpenID revocation to be relevant. –  Monica Cellio Mar 14 '13 at 16:00
    
Sorry, not really sure about all this, but this answer might shed some light. –  Shadow Wizard Mar 14 '13 at 16:02
add comment

1 Answer

up vote 3 down vote accepted

Yes, this is by design. StackAuth auto logs you in if you have an account on the site and you're logged in to SE somewhere else.

Revoking the Google authorization won't do anything. The StackAuth login is done via StackAuth.com, and doesn't contact Google at any point (otherwise you'd be asked to login to Google).

share|improve this answer
    
I suspected as much and even said that in my last comment but wasn't sure enough so edited it out. Thanks! –  Shadow Wizard Mar 14 '13 at 16:11
    
Thanks. I was expecting to be asked to log in to Google. –  Monica Cellio Mar 14 '13 at 16:12
add comment

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .