Expire_on_close set to true, but it does not kill session

[onesneakymofo]

Hello,

I have expire on browser close set to true in my session config file, but when I close the browser and browse back to the page, I am still logged in.

[crynobone]

When you say logged in, are you referring to twitter/facebook login or you user login? The only time that OneAuth would log you in are from https://github.com/codenitive/laravel-oneauth/blob/master/start.php#L94 which only happen when you login to twitter/facebook.

However do come out with a detail how to reproduce this bug.

[onesneakymofo]

I use Google login to log in. My website has no other type of login.

Reproduce:
0. Set expire_on_close to true in Laravel's session configuration file

1. Log in using my Gmail email.
2. Credentials are verified and application logs me in.
3. Close out of browser.
4. Reopen browser and navigate back to website.
5. Still logged in.

I thought expire_on_close was suppose to destroy the session and log out everything, but it does not do so with oneauth.

[crynobone]

Are you by any change using approval_prompt to auto?