Add expiration when clearing cookie.

diff --git a/shibsp/impl/StorageServiceSessionCache.cpp b/shibsp/impl/StorageServiceSessionCache.cpp
index 23b6eec..2d55aa0 100644 (file)
--- a/shibsp/impl/StorageServiceSessionCache.cpp
+++ b/shibsp/impl/StorageServiceSessionCache.cpp
@@ -123,8 +123,11 @@ namespace shibsp {
             pair<string,const char*> shib_cookie = application.getCookieNameProps("_shibsession_");\r
             const char* session_id = request.getCookie(shib_cookie.first.c_str());\r
             if (session_id && *session_id) {\r
-                if (response)\r
-                    response->setCookie(shib_cookie.first.c_str(), shib_cookie.second);\r
+                if (response) {\r
+                    string exp(shib_cookie.second);
+                    exp += "; expires=Mon, 01-Jan-2001 00:00:00 GMT";\r
+                    response->setCookie(shib_cookie.first.c_str(), exp.c_str());\r
+                }\r
                 remove(application, session_id);\r
             }\r
         }\r