Openbravo Issue Tracking System - Retail Modules
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0040577Retail ModulesWeb POSpublic2019-04-10 12:152019-05-07 16:53
Reportergorkaion 
Assigned Toranjith_qualiantech_com 
PriorityhighSeveritymajorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOS5OS Version
Product Version 
Target VersionFixed in VersionRR19Q3 
Merge Request Status
Review Assigned Tomarvintm
OBNetwork customer
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0040577: ExternalOrderLoader creates Successfull sessions with no last ping when it is not stateless
DescriptionWhen the ExternalOrderLoader is called as

http://localhost/openbravo/org.openbravo.mobile.core.service.jsonrest/org.openbravo.retail.posterminal.ExternalOrderLoader [^]

It is authenticating using the doAuthenticate() of DefaultAuthenticationManager. If it is not a stateless request it executes a normal backoffice authentication that creates a Session with status Successful but with no Last Ping value. These sessions are not automatically killed by timeout and count as concurrent user. To clean these sessions you need to restart tomcat or manually kill them.
Steps To ReproduceCall the ExternalOrderLoader not using stateless parameter.

Check Sessions window with System Administrator role. There is a record for each request sent in status Successful and no Last Ping set.
Proposed SolutionCalls to ExternalOrderLoader should create a session with login status SUCCESS_SESSION_WEB_SERVICE and should count as a WebService call.
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2019-04-10 12:15gorkaionNew Issue
2019-04-10 12:15gorkaionAssigned To => Retail
2019-04-10 12:15gorkaionResolution time => 1556661600
2019-04-10 12:15gorkaionTriggers an Emergency Pack => No
2019-05-06 10:56ranjith_qualiantech_comAssigned ToRetail => ranjith_qualiantech_com
2019-05-06 10:56ranjith_qualiantech_comStatusnew => scheduled
2019-05-07 07:59hgbotCheckin
2019-05-07 07:59hgbotNote Added: 0111517
2019-05-07 07:59hgbotStatusscheduled => resolved
2019-05-07 07:59hgbotResolutionopen => fixed
2019-05-07 07:59hgbotFixed in SCM revision => http://code.openbravo.com/erp/pmods/org.openbravo.retail.posterminal/rev/523c76bc9a153454ca88a3a4db5c3e2f0a04d3a7 [^]
2019-05-07 16:53marvintmReview Assigned To => marvintm
2019-05-07 16:53marvintmStatusresolved => closed
2019-05-07 16:53marvintmFixed in Version => RR19Q3

Notes
(0111517)
hgbot   
2019-05-07 07:59   
Repository: erp/pmods/org.openbravo.retail.posterminal
Changeset: 523c76bc9a153454ca88a3a4db5c3e2f0a04d3a7
Author: Ranjith S R <ranjith <at> qualiantech.com>
Date: Tue May 07 11:28:50 2019 +0530
URL: http://code.openbravo.com/erp/pmods/org.openbravo.retail.posterminal/rev/523c76bc9a153454ca88a3a4db5c3e2f0a04d3a7 [^]

Fixed issue 40577 : Updated ExternalOrderLoader class with Stateless authentication

* If ExternalOrderLoader is updated with Stateless authentication,
  then every request to ExternalOrderLoader should be consider as webservice call and it will not consider as request as concurrent user

---
M src/org/openbravo/retail/posterminal/ExternalOrderLoader.java
---