当用户关闭选项卡时注销

Question

On my Django site, I want to logout from the site automatically when I close the tab or browser. I mean when I close the site by closing the tab instead of using logout button, after entering the URL again, I want to see that the user has already logged out from the site to force the user to enter username and password again.

Is there a way to handle closing the tab in JQuery?

Thank you in advance.

Edit: onunload & onbeforeunload events cause to logout the user when also reloading the page.

Answer 1

You can use Javascript onunload & onbeforeunload events. In these events destroy the session cookie for Django.

Those events are also fired when you leave a site over a link or your browsers back button so be careful and think twice if this is really what you want.

Answer 2

Add your logout code to the on onunload event.

window.onunload = function () {
    //logout code here...
}

In JQuery you can use the .unload() function. Remember that you don't have much time so you may send the Ajax request but the result may not reach the client.

Another trick is to open a small new window and handle the logout there.

window.open("logout url","log out","height=10,width=10,location=no,menubar=no,status=no,titlebar=no,toolbar=no",true);

If you want to disable closing the window (or at least warn the user), you can use this code:

window.onbeforeunload = function(event) {
    //if you return anything but null, it will warn the user.
    //optionally you can return a string which most browsers show to the user as the warning message.
    return true;
}

Another trick is to keep pinging the client every few seconds. If no reply comes back, assume the user has closed the window, browser has crashed or there is a network issue that ended the chat session anyway. On the client side, if you don't receive this ping package, you can assume that network connection or server has a problem and you can show the logout warning (and optionally let the user login again).

Answer 3

I just ran into this. In your Django settings.py file, you can add the flag:

SESSION_EXPIRE_AT_BROWSER_CLOSE = True

This will log the user out when the browser is closed. Note that the user will remain logged in if there are other tabs or windows still open (the browser must be completely closed).