Safari keeps me logged in

Question

Level 1

18 points

Safari keeps me logged in

Whenever I log into a site using basic authentication will stay logged in... forever. Clearing caches, resetting Safari - nothing works.

How can I get Safari not to store my credentials and not keep me logged in?

Note I have not saved the credentials in any way.

Late 2008 Macbook, Mac OS X (10.6.1), iPhone 3GS

Posted on Oct 12, 2009 3:52 PM

Reply

Answer 1

Oct 12, 2009 8:27 PM in response to sebrock

HI,

From the Safari Menu Bar, click Safari/Preferences and select the AutoFill tab.

Deselect: User names and passwords

Also, anytime you logon to a web site you can always log off from the site whether it's Facebook, or a banking site, etc.

FYI. Your Mac OS X has an application called Keychain Access. (Applications/Utilities)

Keychain Access stores all of your user names and passwords for you.

Carolyn 🙂

Reply

Answer 2

sebrock Author

Level 1

18 points

Oct 13, 2009 1:25 AM in response to Carolyn Samit

Ok, thanks for the reply but that is not the issue here. If it only was that simple...

I've checked AutoFill/Keychain etc. and it does not store anything.

My issue is based on what Apache calls "Basic authentication". I.e whenever I log in my session is activated and kept activated using cookies. However deleting all cookies does nothing for me. So I wonder what is the timeout for these sessions and why can't I manually prune all active sessiones?

Reply

Answer 3

Oct 13, 2009 6:04 AM in response to sebrock

Can you not logout from this site itself? Have you tried this with Firefox?

Facebook keeps me always logged in, unless I logout from the site.

If this site won't let you logout then it's a poorly design site. Write the to administrator of the site and ask what's going on.

Message was edited by: David M Brewer

Reply

Answer 4

Oct 13, 2009 11:50 AM in response to sebrock

Browsers cache the username and password with the authentication realm for as long as the browser application is open. Shutting down the browser will kill the session. There are hacks for tricking the browser to forget the user's credentials. You might want to look at these:

http://stackoverflow.com/questions/233507/how-to-log-out-user-from-web-site-usin g-basic-authentication
http://userfirstweb.com/23/logouts-form-based-http-basic-authentication/
http://blog.springenwerk.com/2008/11/i-am-currently-building-iphone.html

Reply