cflogin problem

[prabin_sh]

I am using coldfusion authentication architecture to get the users logged in
to my system.
Authentication is working ok but it is giving me problems when user doesn't
properly logout.

Steps are
1. User logs in
2. User closes the browser without logging out.
3. User opens new browser and tries to login again.
4. This time when user logs in, the body part of "cflogin" tag is not
executed.(which I checked by displaying a message from within body part of
cflogin tag.)

I know that the body part of ?cflogin" tag is only executed if user is not
logged in but I guess it should be executed if sessionid is different for newly
opened browser in about scenario.. right?. I checked the session id and it is
different for each new browser that is opened.

I am using cookie as login storage. I don?t know what happens to the stored
login information if browser is closed without logging out. But next time user
logs in cflogin tag should be executed to get the user authenticated in my view.

Can any body help me with this problem?

[tjfrevert]

When do you set the cookie to expire?

[prabin_sh]

hi TJF,

i haven't set any cookie expiry time.

but to generate unique session id for each browser i have used following code

<cflock timeout="30" type="exclusive">
<cfif IsDefined("Session.CFID") and IsDefined("Session.CFTOKEN")>
<cfcookie name="CFID" value="#session.CFID#">
<cfcookie name="CFTOKEN" value="#session.CFTOKEN#">
</cfif>
</cflock>

also i have set client storage to registry. Does it make any difference...

[Boiler2005]

Hello... For the application I am currently dev. I am using CFLOGIN.
When a user navigates to the site it directs them to login.cfm where they
enter their Username and Password. Everything is working fine except for some
reason CF is requiring the use to login 2 times, twice, and then allow the site
to function. Any ideas? Thank you in advance.
/// I have pasted my application.cfm below.

[Boiler2005]

<cfapplication name="GetLeadApp" clientmanagement="no" sessionmanagement="yes"
setclientcookies="no" setdomaincookies="no" sessiontimeout="20" >
<cfparam name="session.sessionDate" default="#Now()#" type="date">


<!--- Logout --->
<cfif IsDefined("Form.logout")>
<cflogout>
</cfif>


<!--- Login --->
<cflogin>
<cfif NOT IsDefined("cflogin")>
<cfinclude template="login.cfm">
<cfabort>
<cfelse>
<cfif cflogin.name IS "" OR cflogin.password IS "">
<CFSET login_status = "empty">
<cfinclude template="login.cfm">
<cfabort>
<cfelse>
<CFQUERY NAME="loginQuery" DATASOURCE="#APPLICATION.Datasource#"
username="#username#" password="#password#">
SELECT *
FROM logininfo
WHERE
userid = '#cflogin.name#'
AND password = '#cflogin.password#'
</cfquery>
<cfif loginQuery.Roles NEQ "">
<cfloginuser name="#cflogin.name#" Password =
"#cflogin.password#" roles="#loginQuery.roles#">

<cfelse>
<CFSET login_status = "invalid">
<cfinclude template="login.cfm">
<cfabort>
</cfif>
</cfif>
</cfif>
</cflogin>