Merge remote branch 'smcv/ready/transient-recentchanges'

[ikiwiki.git] / doc / bugs / logout_in_ikiwiki.mdwn

diff --git a/doc/bugs/logout_in_ikiwiki.mdwn b/doc/bugs/logout_in_ikiwiki.mdwn
index a9c407ba2921008e4fdf1e937008937782579e01..d9b6df677209039153d27981bf7bd76484998efc 100644 (file)
--- a/doc/bugs/logout_in_ikiwiki.mdwn
+++ b/doc/bugs/logout_in_ikiwiki.mdwn
@@ -12,11 +12,20 @@ It looks like there is no way to logout of ikiwiki at present, meaning that if y
 >> (I'd argue also in favor of the openid_provider cookie expiring 
 >>  in less time than it does now, and being session based)
 
+>>> (The `openid_provider` cookie is purely a convenience cookie to
+>>> auto-select the user's openid provider the next time they log
+>>> in. As such, it cannot be a session cookie. It does not provide any
+>>> personally-identifying information so it should not really matter 
+>>> when it expires.) --[[Joey]]
+
 >> It would be nice to move navigational elements to the upper right corner 
 >> of the page...
 
 >> I have two kinds of pages (wiki and blog), and three classes of users  
+
 >> anonymous users - display things like login, help, and recentchanges,
+
 >> non-admin users - on a per subdir basis (blog and !blog) display 
 >> logout, help, recentchanges, edit, comment 
+
 >> admin users - logout, help, recentchanges, edit, comment, etc