End session

Overview

The End Session filter terminates a cookie-based HTTP session. This filter tries to locate the session specified by the VIDUSR cookie, and then invalidates it.

The End Session filter should be used with the Create Session and Check Session filters to manage HTTP sessions. For more details, see:

Configuration

Complete the following fields to configure this filter:

Name:

Enter an appropriate name for this filter to display in a policy.

Remove session cookie:

Select whether to try and remove the session cookie. When selected, the API Gateway sends a new cookie with the expiry time set in the past. You must also set the same domain and path values that were used to create the session using the Create Session filter.

Session cookie domain:

When Remove session cookie is selected, enter the same domain that was used to create the session in the Create Session filter (for example, example.com). This removes the cookie for the specified domain only.

Session cookie path:

When Remove session cookie is selected, enter the same path that was used to create the session in the Create Session filter (for example, /sales). This removes the cookie for the specified path only. Defaults to /.