Is Discourse supposed to log you out across browsers?

AI-generated summary

The discussion revolves around whether Discourse’s default behavior of logging users out across browsers is intended. erlend_sh discovered this behavior and found it unusual. JSey pointed out the site setting “log out strict” which controls this behavior. codinghorror and sam agree that this is the intended behavior, but suggest implementing a “transitionary” logout screen to allow users to choose whether to log out everywhere or only on the current device.

A mockup of the logout screen was proposed by riking, but sam suggested a simpler approach using a checkbox to clearly explain the options. codinghorror suggested rewording the options to make them clearer. JSey proposed adding a countdown to the “logout everywhere” option to ensure users understand the consequences.

I was a bit surprised today as I was doing some testing. When I logged out from meta.discourse.org in my Chrome browser, I got logged out of meta.discourse.org in my Safari session as well. Also works the other way, as well as on a mobile browser.

Is this intended behaviour? it strikes me as quite odd. I don’t know of any other web app that does this.

Have you seen this topic? You’re looking for the site setting “log out strict”. IMHO this should not be checked by default…

「いいね!」 3

Safety is the default, remember.

「いいね!」 3

Yes, but it is configurable using the site setting “log out strict”

I am thinking we should maybe look at adding a “transitionary” logout screen that allows end users to pick their poison.

「いいね!」 7

Would be a good idea since logout is so rare anyway an additional dialog is no big deal.

Mocked

(both would be in a modal)

.btn-huge {
    width: 100px;
    height: 100px;
    display:inline-flex;
    flex-direction:column;
    align-items: center;
    justify-content: center;
    vertical-align:middle;
}
.btn-huge i.fa {
    display:block;
    text-align:center;
    margin-right:0;
    margin-bottom: 7px;
}

The btn-huge style I just created seems like a good thing to have anyways (which is why I made it).

「いいね!」 1

“This device” not computer. Also I would say “Log me out everywhere” versus “Log me out on this device only” etc. Probably only the exceptional case should use fa-alert.

「いいね!」 2

btn-huge looks really bad and not like a button.

I would simply display a modal with:

[ ] Log me out everywhere

[Log Out] [Cancel]

Choosing between two buttons is confusing, a checkbox that clearly explains what will happen is desirable.

「いいね!」 4

Yeah, you’re probably right :laughing:

If you like the safety first rule applied here too, maybe the logout everywhere shout contain a countdown “(in 10s…)” just to make sure.