How to handle access denied response

[gabor.ottlik.hun]

This helped.

Logging out completely

Hey - that’s not the most usable solution though, as a non-persistent cookie will be removed on closing the browser, requiring a re-login if I close the tab/browser session. Also, the cookie isn’t the issue here - as I mentioned, the cookie is removed with the /api/auth/logout call, the issue is that some other magic is logging the user back in without logging in if its within a time period of the logout. For me, logout should mean logout, I don’t understand how this behaviour is useful or sec…