[4.0] Frontend user is not logged out if browser window is closed

[Scrabble96]

Steps to reproduce the issue

Log in on the frontend e.g. on Firefox
Close the browser

Expected result

User logged out

Actual result

Open another browser window (same browser, e.g. Firefox, not Chrome)
User stays logged in.

System information (as much as possible)

Additional comments

If this were a website holding financial/personal information, this could also be a security issue.

[simbus82]

Absolutely not. If you want the shortest login time just adjust the session time or browse in private/anonymous mode.
It is neither intended nor correct on the UX side to destroy a user's session if he closes the browser window. This is the normal behavior of a modern website.
If you want a security system such as when you access the customer area of a bank, you have to adapt everything there to your specific needs.

[laoneo]

Or write a plugin/template function which listens to the Javascript onbeforeunload event and destroy the session cookie.

[Scrabble96]

Thanks, I'll have a look at that.

[chmst]

This is expected behaviour and normal in the web. I moved this to discussion - in case someone wants to follow the hint of @laoneo