auth0/node-samlp

Caching suggestion to avoid phantom logons

andrew-k-21-12 opened this issue · 0 comments

Not sure about it, but maybe we should add here some cache-preventing headers:

res.set('Content-Type', 'text/html');

Otherwise browsers use a cached response and complete a logon if we just press a back button (even if we are now in a logged out state). Thank you.