OpenID: always enable auto-logout for SSL cert auth.

1 files changed, 6 insertions, 0 deletions

diff --git a/okupy/accounts/views.py b/okupy/accounts/views.py
index ed243e5..691f106 100644
--- a/okupy/accounts/views.py
+++ b/okupy/accounts/views.py
@@ -219,6 +219,12 @@ def ssl_auth(request):
     # the data to the original session and preferably flush the new one.
     session = SessionStore(session_key=session_id)
     session.update(request.session)
+
+    # always logout automatically from SSL-based auth
+    # it's easy enough to log back in anyway
+    if 'openid_request' in session:
+        session['auto_logout'] = True
+
     session.save()
     request.session.flush()
     return redirect(next_uri)