Cookies and Changing passwords?

[The Edge]

My API has my session cookie, which it keeps alive, and has been doing so for a long time.

If I change my password, will this kill the cookie, seeing as it was logged on using an out-of-date password?

[merecat_]

I would expect it to (hope it would!) invalidate the sessions server side - after all you might be changing it because your password has been compromised.

[The Edge]

I have a feeling that changing the password does not disable current cookies!

I have just reset my password, but my application that used my cookie is still working and hasn't been logged out!

Could someone from Betfair confirm whether or not this is expected behaviour?

[BetfairDeveloperProgram]

I have just reset my password, but my application that used my cookie is still working and hasn't been logged out!

Hi The Edge,

Yes, this is expected behaviour. Once the previous session had expired or you have explicitly logged out the existing session will no longer be valid. We have the ability to forcibly close any existing sessions on your account if required.

Thanks

Neil