When I go to the main stackexchange.com site, and login, then logout, after I try to login again, I am automatically logged in, without having to enter any account details.
Then I press login:
Note, that I didn't fill out anything, it just logged me in. When I logout explicitly on the site, I get logged out, but I can still just click the login page and get logged in automatically, without needing to enter my details.
- I am using an own OpenID URL that delegates to SE's OpenID provider
- Browser: Chrome
- After logout local storage and session storage are empty. The following cookies are present:
EDIT: If you closed this question, because it is a duplicate, please note that at the duplicate question the poster actually clicked on the SE provider to arrive at the auto-login page. In my case I did not have to click on any of the provider buttons, which means simply arriving at the login page will do an auto-login, essentally preventing logging in as any other user (which, if it is by design, is probably wrong)