7

A couple weeks ago I logged out of a site that I wasn't expecting to use again, and also revoked Google's OpenID authorization (just being tidy). Yesterday I followed a link from chat to that site and it auto-logged me in (no prompt, no password challenge, and apparently approval from Google?). This isn't a complaint, but I am puzzled by what happened.

What is logging out supposed to mean, with respect to future visits to that site? I expected to come in as a not-logged-in user.

(All of this was in Firefox, but on two different machines.)

4
  • Probably because you are logged in with the same OpenID in other site. Mar 14, 2013 at 15:59
  • @ShaWizDowArd But if you explicitly revoke the OpenID authorization, should that still happen?
    – Bart
    Mar 14, 2013 at 15:59
  • Right, I was (continuously) logged in on other sites, but I expected the OpenID revocation to be relevant. Mar 14, 2013 at 16:00
  • Sorry, not really sure about all this, but this answer might shed some light. Mar 14, 2013 at 16:02

1 Answer 1

3

Yes, this is by design. StackAuth auto logs you in if you have an account on the site and you're logged in to SE somewhere else.

Revoking the Google authorization won't do anything. The StackAuth login is done via StackAuth.com, and doesn't contact Google at any point (otherwise you'd be asked to login to Google).

2
  • I suspected as much and even said that in my last comment but wasn't sure enough so edited it out. Thanks! Mar 14, 2013 at 16:11
  • Thanks. I was expecting to be asked to log in to Google. Mar 14, 2013 at 16:12

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .