From cd36a46bbb5679ded1653f65bf4e8a74ae55100c Mon Sep 17 00:00:00 2001 From: erdgeist Date: Fri, 24 Jul 2026 13:52:34 +0200 Subject: Remove restful_authentication's forget_me relic --- lib/authenticated_system.rb | 2 -- 1 file changed, 2 deletions(-) diff --git a/lib/authenticated_system.rb b/lib/authenticated_system.rb index 217f79e9..7accfaaa 100644 --- a/lib/authenticated_system.rb +++ b/lib/authenticated_system.rb @@ -109,8 +109,6 @@ module AuthenticatedSystem # havoc with forgery protection, and is only strictly necessary on login. # However, **all session state variables should be unset here**. def logout_keeping_session! - # Kill server-side auth cookie - @current_user.forget_me if @current_user.is_a? User @current_user = false # not logged in, and don't do it for me session[:user_id] = nil # keeps the session but kill our variable # explicitly kill any other session variables you set -- cgit v1.3