topic Re: Password Protected Page Logout in CMS Development

Password Protected Page Logout

CBelga — Tue, 12 Sep 2023 13:03:25 GMT

In my understanding, once the correct password is entered on a password-protected HubSpot page, continuous access is granted every time the page is revisited. However, I would like to implement a "Logout" button. This would ensure that users are required to re-enter the password upon each visit, following their decision to log out. Has anyone among you been able to implement this?

Re: Password Protected Page Logout

himanshurauthan — Wed, 13 Sep 2023 08:11:08 GMT

Hello @CBelga

You can use HubSpot custom module. There is a custom module called "Logout" that can be used to add a logout button to a page.

Re: Password Protected Page Logout

CBelga — Wed, 13 Sep 2023 12:38:37 GMT

I can't seem to find this Logout custom module. What I know is that you can logout a user by creating a button/link that will redirect them to "/_hcms/mem/logout" but this is for a registration required page and does not work for a password required page

Re: Password Protected Page Logout

SophieHull — Wed, 13 Sep 2023 14:40:10 GMT

I believe what you're looking for is a session management feature rather than just a password-protected page. Session management would allow you to log users out after a certain period of inactivity or when they explicitly click a "Logout" button. You might need to use custom code or integrate third-party solutions to achieve this specific functionality with HubSpot.

Re: Password Protected Page Logout

CBelga — Wed, 13 Sep 2023 14:47:57 GMT

In this instance, I'm looking to utilize a page that is protected by a password. I'm aware that a cookie is generated once the correct password is entered. This cookie always contains a "_key" and if it's removed, the user will be prompted to re-enter the password upon revisiting the page. However, the cookie with the "_key" is HttpOnly, implying it can only be deleted from the server-side. I attempted to use serverless and "Set-Cookie" to delete the cookie by assigning it an "expires" attribute with a past date value, but it was unsuccessful.

Re: Password Protected Page Logout

Jnix284 — Fri, 15 Sep 2023 20:58:14 GMT

@CBelga because it is a password protected page (using the cookie key) and not a membership page (using sessions) there isn't a way that I know to prevent a returning visitor from accessing the page again unless you change the password or expire the page.