Forum Discussion
dipta_03_149731
Nimbostratus
Nov 23, 2015How to write an Irule to delete session cookies so that we can enhnace security level.
We have few admin URLs that we dont want to be accessed by a 3rd person after we logout from the application. So can we write an Irule to " set all cookies to expired state".
Rami_307440
Nimbostratus
Aug 31, 2017Hi, Were you able to solve this problem ? The only way to clear or change a session by the application as it's the only owner of that session. You may insert a new session, but the old session will remain unless you close the browser.
when HTTP_REQUEST {
set logOut 0
if {(([HTTP::uri] ends_with "logout") or ([HTTP::uri] ends_with "logout.do")) }
{
set logOut 1
}
}
when HTTP_RESPONSE {
if { $logOut == 1 }
{
set session_key "whatever0928340923any"
HTTP::cookie insert name "session_id" value $session_key
}
Please let me know if you find a way to clear the session on logout using iRules.
Thanks,
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects