Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #35847 Management of session expiration
    Actions
    Infos
    #35847
    Manuel Vacelet (vaceletm)
    2024-04-25 14:28
    2024-01-12 11:33
    37433
    Details
    Management of session expiration

    Right now there are a couple of situations where we can loose the navigation due to session expiration:

    • When someone stay on a page for too long and reload the page (either Ctrl + R or restart of browser with tabs that reloads the previously browsed pages) => we end up on "tuleaplogin" page that doesn't do any login and we loose the original page.
    • When someone edit a page and the session expire, there is no transparent renew of the token and the editor has to do some ticky manipulation to force renew of the token in another tab before being able to save.
    Mediawiki Standalone
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Robert Vogel (rvogel), Dejan Savuljesku (dsavuljesku)
    Stage
    Dejan Savuljesku (dsavuljesku)
    Verified
    Empty
    Attachments
    Artifact links
    Empty
    Empty
    References
    References list is empty
    Display settings

    Follow-ups

    User avatar
    Manuel Vacelet (vaceletm)2024-01-15 11:54

    Is session-loss a general issue? Like the session expires too quickly / gets lost frequently?

    I don't think so. It's a good thing if the session expire "quickly" as long as it's transparent for the end user. It's the best way we have to ensure that user still have access to Tuleap.

    It may be a good idea to use the database as a session store, if that's not already the case.

    It's already used: https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=blob&f=plugins/mediawiki_standalone/additional-packages/mediawiki-tuleap-config/LocalSettings.Tuleap.php#L153