Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
0054156Openbravo ERPA. Platformpublic2023-12-18 18:082023-12-18 18:12
ablasco 
Triage Platform Base 
normalmajorhave not tried
newopen 
5
 
 
Core
No
0054156: Race-Condition - Deferred Login State Initialization During the Login Process
Sometimes, the Login state requires the definition of the sessionID variable to verify whether we are inside or outside the application.

During the Login load ( or refresh ), various processes (such as loading Masterdata, backendserver initialization, among others) can be executed in parallel, and the definition of sessionID is a resource that may not be defined in some cases.

There are certain processes dependent on sessionID to identify that they are running within the application. (For example, the Backend Server initializes various Timeouts, such as the LogoutSession Dialog.)

If the system is overloaded with other processes, most of the time it will work, establishing the sessionID variable.

However, if the system is fast and lightweight ( not so common ), it may happen that the session variable resource is not defined for a condition, creating a conflict that may fail to initialize some background processes.

Therefore, there is a possibility that some functionalities might not work due to a race-condition, and in cases where they do work, it is due to the overload of processes.

This can be verified by slowing down the 3G throttle from Chrome Developer Tools.

There may be times when the session variable is well defined during the Login process, but it should also be considered that refreshing the page can reinitialize the sessionID variable and cause a conflict.
How to check sessionTimeout Case:
In Chrome Developer Tools.

- Add a logpoint in registerAutomaticSessionTimeout() method and review Login SessionID inside of it.

"IsLoginWindow ", OB.App.View.isLoginWindow()

- In login window , this method should give true. Inside the aplication should be false, because this method use sessionId to check if sessionID is null or not.
- Refresh Window. -> The value should give false inside the application during BackendServer initialization but it doesn't due to race-condition.


When is it working
- In network, we could uncheck "No throttling" and change this value to "Slow 3G"
- Refresh window again. --> SessionID is set before and the conditional could execute the BackendServer code correctly.


*See GIF attached.
In that test, we are using the following logpoint.

"IsLoginWindow ", !OB.App.View.isLoginWindow(),"IsLogginIn ", OB.App.Security.isLoggingIn()
No tags attached.
gif AutoSessionThrottle.gif (3,023,025) 2023-12-18 18:08
https://issues.openbravo.com/file_download.php?file_id=19222&type=bug
Issue History
2023-12-18 18:08ablascoNew Issue
2023-12-18 18:08ablascoAssigned To => Triage Platform Base
2023-12-18 18:08ablascoFile Added: AutoSessionThrottle.gif
2023-12-18 18:08ablascoModules => Core
2023-12-18 18:08ablascoTriggers an Emergency Pack => No
2023-12-18 18:09ablascoDescription Updatedbug_revision_view_page.php?rev_id=27240#r27240
2023-12-18 18:12ablascoSteps to Reproduce Updatedbug_revision_view_page.php?rev_id=27242#r27242

There are no notes attached to this issue.