Safari user session quits login session

Question

Serious issue.....I am co-managing an online educational web service - www.intermatte.se. When logging in to the site access is allowed, but when a user presses any menu button on the site he/she is logged out and returned to the login page. It seems that SAFARI erases any login details in the session and kicks the user out. We have a number (+500 users) on the system, and about half use Safari. We do not have any issue with Chrome or IE whatsoever. The same issue appears when used on an Ipad with Safari. My own problems began about 3 mos ago and the same issue popped up on another login site - vektor.ahltorpmedia.se - 1 week  ago. March 22 the problem disappeared, but reappeared the day after - March 23rd. No OS X updates have been perfomed, but 2 Safari updates have been installed during the problem period. PLEASE NOTE: Some of our clients have experienced the same issue using Ipads 2, Safari version unknown.
Techs: MacBook Pro (Retina, 15 inch, sent 2013), 2,3 GHz Intel Core i7, OSX 10.10.2 (14C1514), SAFARI: Version 8.0.4 (10600.4.10.7)

Answer 1

Muneer_Ahmed wrote:
if user click back button form Internet Browser. Browser Display back page.This page is just viewed from the browser cache. You really don't need to worry about it as long as you have a good login check which checks every real (non-cached) request.
I admit that this is bad for the user experience of the 'dumb users'. In this case just disabling the browser caching in the response headers is sufficient.
You can disable the browser caching by adding those meta statements to the HTML head:
<meta http-equiv="cache-control" content="no-cache">
<meta http-equiv="pragma" content="no-cache">
<meta http-equiv="expires" content="0">or if you want to do it programmatically (e.g. a filter or so), use this:
response.setHeader("cache-control", "no-cache"); // HTTP 1.1.
response.setHeader("pragma", "no-cache"); // HTTP 1.0.
response.setDateHeader("expires", 0); // Proxy.