{"action":"closed","issue":{"url":"https://api.github.com/repos/IdentityManager/IdentityManager/issues/159","labels_url":"https://api.github.com/repos/IdentityManager/IdentityManager/issues/159/labels{/name}","comments_url":"https://api.github.com/repos/IdentityManager/IdentityManager/issues/159/comments","events_url":"https://api.github.com/repos/IdentityManager/IdentityManager/issues/159/events","html_url":"https://github.com/IdentityManager/IdentityManager/issues/159","id":105797149,"number":159,"title":"LogOut does not remove cookie","user":{"login":"JanWilczak","id":6815798,"avatar_url":"https://avatars.githubusercontent.com/u/6815798?v=3","gravatar_id":"","url":"https://api.github.com/users/JanWilczak","html_url":"https://github.com/JanWilczak","followers_url":"https://api.github.com/users/JanWilczak/followers","following_url":"https://api.github.com/users/JanWilczak/following{/other_user}","gists_url":"https://api.github.com/users/JanWilczak/gists{/gist_id}","starred_url":"https://api.github.com/users/JanWilczak/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JanWilczak/subscriptions","organizations_url":"https://api.github.com/users/JanWilczak/orgs","repos_url":"https://api.github.com/users/JanWilczak/repos","events_url":"https://api.github.com/users/JanWilczak/events{/privacy}","received_events_url":"https://api.github.com/users/JanWilczak/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/IdentityManager/IdentityManager/labels/question","name":"question","color":"cc317c"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2015-09-10T12:34:37Z","updated_at":"2015-09-11T14:34:43Z","closed_at":"2015-09-11T14:34:43Z","body":"Hi,\r\n\r\nwhen pressing LogOut button in IdentityManager it actually displays that logout was successful, but the cookie is still there and after having pressed \"Login\" the user is logged in without entering credentials. Do you know what's causing that? \r\nMy configuration:\r\n```\r\nJwtSecurityTokenHandler.InboundClaimTypeMap = new Dictionary<string, string>();\r\n            appBuilder.UseCookieAuthentication(new CookieAuthenticationOptions\r\n            {\r\n                AuthenticationType = \"Cookies\",\r\n            });\r\n\r\n            appBuilder.UseOpenIdConnectAuthentication(new OpenIdConnectAuthenticationOptions\r\n            {\r\n                //AuthenticationType = \"oidc\",\r\n                Authority = \"http://localhost/myapp/auth\",\r\n                ClientId = \"idmgr_client\",\r\n                RedirectUri = \"http://localhost/myapp/auth/admin\",\r\n                ResponseType = \"id_token\",\r\n                UseTokenLifetime = false,\r\n                Scope = \"openid idmgr\",\r\n                SignInAsAuthenticationType = \"Cookies\",\r\n                Notifications = new OpenIdConnectAuthenticationNotifications\r\n                {\r\n                    SecurityTokenValidated = n =>\r\n                    {\r\n                        n.AuthenticationTicket.Identity.AddClaim(new Claim(\"id_token\", n.ProtocolMessage.IdToken));\r\n                        return Task.FromResult(0);\r\n                    },\r\n                    RedirectToIdentityProvider = async n =>\r\n                    {\r\n                        if (n.ProtocolMessage.RequestType == OpenIdConnectRequestType.LogoutRequest)\r\n                        {\r\n                            var result = await n.OwinContext.Authentication.AuthenticateAsync(\"Cookies\");\r\n                            if (result != null)\r\n                            {\r\n                                var id_token = result.Identity.Claims.GetValue(\"id_token\");\r\n                                if (id_token != null)\r\n                                {\r\n                                    n.ProtocolMessage.IdTokenHint = id_token;\r\n                                    n.ProtocolMessage.PostLogoutRedirectUri = \"http://localhost/myapp/auth/admin\";\r\n                                }\r\n                            }\r\n                        }\r\n                    }\r\n                }\r\n            });\r\n\r\n            appBuilder.Map(\"/admin\", adminApp =>\r\n            {\r\n                var factory = new IdentityManagerServiceFactory();\r\n                SimpleIdentityManagerServiceExtensions.ConfigureSimpleIdentityManagerService(factory,\r\n                    ConnectionStringName);\r\n\r\n                adminApp.UseIdentityManager(new IdentityManagerOptions\r\n                {\r\n                    Factory = factory,\r\n                    SecurityConfiguration = new HostSecurityConfiguration\r\n                    {\r\n                        AdminRoleName = \"admin\",\r\n                        RequireSsl = false,\r\n                        RoleClaimType = \"role\",\r\n                        ShowLoginButton = true,\r\n                        HostAuthenticationType = Constants.CookieAuthenticationType,\r\n                    }\r\n                });\r\n            });\r\n\r\n            var idSvrFactory = Factory.Configure();\r\n            UserServiceExtensions.ConfigureCustomUserService(idSvrFactory, ConnectionStringName);\r\n\r\n            appBuilder.UseIdentityServer(new IdentityServerOptions\r\n            {\r\n                SiteName = \"My Site\",\r\n                RequireSsl = false,\r\n                SigningCertificate = Certificate.Get(),\r\n                Factory = idSvrFactory,\r\n                PublicOrigin = Settings.Default.AuthServer_PublicOrigin,\r\n                AuthenticationOptions = new AuthenticationOptions\r\n                {\r\n                    EnablePostSignOutAutoRedirect = true,\r\n                    EnableSignOutPrompt = false\r\n                }\r\n            });\r\n```"}}