Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

User is forced to login (even for pages not requiring authentication) when session has expired #6

Open
matsbov opened this issue Apr 24, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@matsbov
Copy link

matsbov commented Apr 24, 2024

Steps to reproduce:

  • Log in to SBDI
  • Do not close your browser
  • Wait 24 hours for the session to expire on backend
  • Visit a page not requiring authentication (eg https://records.biodiversitydata.se)
  • The login screen will appear (when it shouldn't)

This is most likely due to the session having a timeout of 24 hours while the ALA-auth cookie is a session cookie. The bug seems to appear when the ALA-auth cookie outlives the session.

This is an upstream bug and can be reproduced on ALA.

@matsbov matsbov added the bug Something isn't working label Apr 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant